Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-lumpur57-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangga85-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lontong64-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut14-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lupis55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lontong28-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lupis98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangga51-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lutis20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lumpur72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lutis19-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut13-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lumpur43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lumpur88-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut50-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lumpur49-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lumpur75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lupis68-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangga47-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lutis2-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lontong54-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangga89-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lumpur72-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut40-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangga22-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lontong8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lutis8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lontong16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut51-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lutis37-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lutis89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-mangut10-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis68-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis72-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-liwet76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lepet72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis90-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lepet19-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-liwet3-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lengko16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-liwet44-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lepet95-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lengko40-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis82-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lodeh17-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lepet64-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis67-breki (npm)
1 compromised version
Page 337 of 7,326