Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-rangi75-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rojak90-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde93-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ronde42-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi53-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi86-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rawon7-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rawon96-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rawon38-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi59-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rawon49-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rojak57-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rojak59-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rujak10-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang76-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang68-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang18-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang14-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rendang1-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rawon41-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi20-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi30-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi22-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi31-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi37-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi29-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ragi35-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang89-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang69-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang75-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangginang20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangginang21-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek84-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangginang62-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ragi3-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang29-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang3-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ragi25-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangginang50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ragi82-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang88-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi100-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek67-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek52-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangginang51-breki (npm)
1 compromised version
Page 331 of 7,326