Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in joko-empal83-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gado-gado13-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dradag25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gado-gado81-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-esdoger85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal37-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gandul66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal78-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-gado-gado28-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dradag78-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-enting35-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-empal83-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes24-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubur5-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-donat81-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes44-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-donat69-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-buburayam25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes84-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-donat55-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes30-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-donat34-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-buburayam97-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-buburayam24-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubur69-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dodol92-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dodol79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubursumsum1-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brongkos18-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubursumsum43-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brongkos79-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes98-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-buburayam46-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-donat10-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubursumsum42-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dodol48-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brongkos31-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-donat14-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-buburayam60-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dodol63-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes27-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubur75-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brongkos5-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubur71-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-donat46-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubursumsum26-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dodol68-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubur17-breki (npm)
1 compromised version
Page 350 of 7,326