Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in joko-kacang39-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus98-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kacang93-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kacang6-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jengkol80-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus85-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang67-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang94-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jengkol14-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jengkol7-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus41-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang84-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus13-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jengkol53-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang59-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang53-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang90-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jengkol56-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jengkol78-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus25-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jengkol30-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jengkol84-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang61-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jus83-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang90-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang34-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ikan35-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai68-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ikan95-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai61-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang51-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang35-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai96-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai6-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai56-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang4-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai82-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ikan2-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ikan83-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai41-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai81-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-jamblang19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ikan14-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ikan9-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gorengan91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gorengan7-breki (npm)
1 compromised version
Page 347 of 7,326