Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-mangut55-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak80-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak40-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut78-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut12-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak59-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendut21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak7-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendut54-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendoan22-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendoan23-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendut28-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak26-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak74-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut79-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut3-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak31-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak58-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak73-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendoan65-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak88-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendoan9-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak77-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendut64-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak40-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak48-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak32-puyeng (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak15-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut82-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak20-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut83-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendut70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mendoan100-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-martabak50-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lontong85-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangga95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lutis12-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lupis44-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangga59-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lutis40-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut70-breki (npm)
1 compromised version
Page 336 of 7,326