Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in joko-brengkes95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-donat48-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-buburayam11-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dodol94-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes38-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brongkos58-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubursumsum68-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes78-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-buburayam14-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubursumsum85-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dodol39-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes56-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubursumsum51-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubur34-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dodol84-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubur92-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubur49-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bubursumsum87-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-dodol9-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan42-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-botok45-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-brengkes100-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan70-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan66-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan58-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso89-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan59-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso74-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan60-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan54-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bika9-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-botok42-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan68-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan26-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan85-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso83-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bika39-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan59-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso85-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan24-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso55-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-botok22-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso90-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan85-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan12-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-botok25-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bika38-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso76-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-botok43-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-botok7-breki (npm)
1 compromised version
Page 351 of 7,326