Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-nasicampur79-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi61-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasicampur65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasipecel65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi67-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-naget63-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi96-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasicampur51-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasicampur48-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi66-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-naget67-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi17-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasicampur99-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasipecel46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi38-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi73-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi26-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasicampur48-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasicampur100-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi91-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi80-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-naget88-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasi69-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-naget76-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasicampur40-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-nasicampur40-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miemee42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-moci58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-moci12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miebogor90-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-naget13-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miemee56-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-naget18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-moci61-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-naget14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miebogor13-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-naget35-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-moci53-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miemee1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miebogor56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miemee18-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieayam91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieayam95-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miebogor8-miaww (npm)
1 compromised version
Page 334 of 7,326