Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in joko-getuk16-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas17-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas53-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gembus31-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getuk76-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getuk15-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getuk62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gepuk35-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-getas90-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-enting31-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gado-gado53-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gado-gado56-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-esdoger1-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-enting48-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dradag64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-enting80-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal65-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gandul28-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal12-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal48-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gandul56-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gandul49-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal77-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gado-gado72-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dradag46-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gado-gado81-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dradag38-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal15-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal65-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-esdoger74-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal10-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gado-gado30-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal55-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-enting52-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-enting79-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-esdoger20-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-esdoger59-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gandul43-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-donat85-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-enting44-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-esdoger11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-esdoger84-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal89-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal48-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-esdoger48-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gado-gado80-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gandul11-miaww (npm)
1 compromised version
Page 349 of 7,326