Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,277 total · sorted newest first- Sep 17, 2026
Malicious code in joko-sambel52-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambalado74-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel77-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambalado10-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sasag54-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambalado33-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambalado71-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel59-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel61-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sasag71-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sasag40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambalado59-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambalado4-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel96-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sasag58-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambalado31-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel61-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sasag58-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel63-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel54-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel94-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambalado70-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel4-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel39-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel14-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel69-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak45-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujaksoto36-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak64-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujaksoto88-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer69-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak85-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer8-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujaksoto62-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer22-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak35-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet36-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujaksoto95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer27-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak86-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer80-breki (npm)
1 compromised version
Page 329 of 7,326