Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-moci25-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieayam8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miemee57-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-naget5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miemee11-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-moci5-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-moci29-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miemee40-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-moci32-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miebogor75-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miemee49-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieayam60-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieayam68-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miebogor14-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieaceh89-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieayam65-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-moci21-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miebogor12-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miebogor40-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-miebogor19-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mie57-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mie18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieaceh70-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes99-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mie87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendut97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendut75-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendut72-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieaceh19-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieaceh58-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes26-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mie34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes85-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes87-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieaceh59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes38-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mie97-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieaceh82-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mie14-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes13-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes96-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieaceh12-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mie46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieaceh58-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mieaceh24-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mie56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mie8-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-menjes67-breki (npm)
1 compromised version
Page 335 of 7,326