Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-lapis88-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-liwet15-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-liwet54-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis96-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lengko29-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis89-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis66-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lodeh85-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-liwet1-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-liwet49-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lepet85-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lodeh89-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lepet85-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lepet19-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lodeh4-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lodeh64-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis86-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lodeh2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupat27-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis16-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupat41-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis11-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang59-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupat15-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang50-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupat58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis48-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang25-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang69-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang75-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis54-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang87-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupat65-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis1-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupat19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang72-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis57-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupat67-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang64-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis13-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang99-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis13-sluey (npm)
1 compromised version
Page 338 of 7,326