Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-ongol-ongol64-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-pecel34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-papeda45-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-papeda85-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-otak-otak59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oblok38-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oblok82-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur65-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur82-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oblok8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasipecel90-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur45-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk79-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur70-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oncom33-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk16-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasipecel95-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oncom97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur33-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk6-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk23-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oncom93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk28-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur20-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur99-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasipecel91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oncom20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oblok30-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk17-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oncom92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oncom74-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk24-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur85-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk27-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasiuduk10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur8-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oncom11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-oncom51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasisayur59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasipecel13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasipecel57-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasipecel1-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasicampur26-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi49-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi58-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi58-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasipecel11-miaww (npm)
1 compromised version
Page 333 of 7,326