Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in joko-gorengan61-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gorengan81-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg89-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gorengan35-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gorengan51-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg96-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg97-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg96-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg61-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg21-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gorengan32-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gorengan61-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg66-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg44-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gorengan46-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gulai33-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg29-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gudeg59-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gorengan59-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk77-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gembus56-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas81-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk11-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gembus65-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gandul78-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk84-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gembus88-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas19-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gaplek25-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gembus45-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getuk88-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gembus60-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gembus98-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk1-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getuk32-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gaplek75-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gaplek59-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas16-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas23-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas86-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk39-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk5-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gaplek81-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gembus24-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gandul87-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas3-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk69-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk29-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gaplek40-ruro (npm)
1 compromised version
Page 348 of 7,326