Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Sep 17, 2026
Malicious code in joko-kue1-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue62-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue46-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue40-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue3-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue59-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue5-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue50-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kripik78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kripik79-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kripik65-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kripik98-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue13-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue35-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue20-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue42-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue43-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue25-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue36-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue25-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue4-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kue52-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kolak23-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klipo27-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kolak17-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kolak18-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klentik3-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klentik67-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klipo93-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klentik38-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klentik51-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kripik18-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kripik58-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klipo19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kolak33-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klanting76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kripik37-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klipo59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klipo28-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klentik90-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klentik22-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kolak25-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klentik15-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klentik23-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-klipo43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-kolak89-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kartykgithub-takedown-b (npm)
1 compromised version
- Sep 17, 2026
Malware in kartykgithub-takedown-b
1 compromised version
Page 340 of 7,326