Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-peyek43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang69-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek52-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ragi37-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ragi64-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang78-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek77-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangginang60-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ragi16-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek61-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ragi50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pisang88-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-rangi20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek98-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak33-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pecel12-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak54-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak57-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak65-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak96-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-papeda92-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-papeda86-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek15-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek4-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek19-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ongol-ongol92-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pecel84-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-papeda75-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pecel83-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ongol-ongol77-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-papeda39-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ongol-ongol20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek19-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ongol-ongol27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pecel19-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak72-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-papeda66-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak83-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pecel53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ongol-ongol1-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-peyek29-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pecel78-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak15-ruro (npm)
1 compromised version
Page 332 of 7,326