Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in joko-ketan40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik1-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketan37-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketan28-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keraktelor75-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik88-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kentang65-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok4-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok33-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang72-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang7-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok30-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kentang37-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kentang14-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang60-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang27-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok57-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok21-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok53-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok37-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang66-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok15-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang79-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kentang4-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kentang83-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang69-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kentang26-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kentang46-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok61-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang49-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang58-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang53-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang42-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang47-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang16-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kemplang45-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang90-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang90-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang98-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang2-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus93-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kacang92-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kacang44-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kacang62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kacang87-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kembang28-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kacang41-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kacang44-breki (npm)
1 compromised version
Page 346 of 7,326