Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-kupang56-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis18-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang8-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis51-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kupang56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis100-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis39-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-lapis15-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue69-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue7-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue64-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue96-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue97-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue95-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue76-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue93-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue94-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue70-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue71-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue98-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue90-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue81-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue74-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue88-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue88-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue94-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue93-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue85-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue74-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue7-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kripik9-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue12-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue19-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue54-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue22-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue62-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue29-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue5-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kripik63-sukiwir (npm)
1 compromised version
Page 339 of 7,326