Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,277 total · sorted newest first- Sep 17, 2026
Malicious code in joko-rujaksoto43-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer38-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet100-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet10-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet10-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujaksoto25-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujaksoto13-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujaksoto55-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet23-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak99-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet74-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer94-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer15-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak96-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ruwet96-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang71-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde58-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rojak29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi87-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak27-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rawon72-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rawon56-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang44-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rojak74-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde69-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rojak56-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi98-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde53-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang21-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rojak66-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang64-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde4-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rawon46-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi63-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rojak31-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang15-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi49-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi75-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rojak90-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde93-riris (npm)
1 compromised version
Page 330 of 7,326