Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in joko-bakso91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan12-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bika45-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso77-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso68-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan36-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bika81-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan31-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan34-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan46-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakwan95-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-botok52-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan94-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_perch_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joker123-gaming (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_pony_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_primate_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan36-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joknmax (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso41-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_tortoise-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan61-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joker388 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso39-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_hedgehog_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_sheep_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan24-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan35-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_panther_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-bakso14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_hookworm_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_porpoise_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan56-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_raccoon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan99-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_elephant_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joker123 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan6-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joker123-slot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-asinan36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_swan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joee-banut-imubuair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joggingo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_caterpillar_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish-variendo-18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joee-baut-imur (npm)
1 compromised version
- Sep 13, 2026
Malicious code in join-params (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joan-teadev (npm)
1 compromised version
Page 352 of 7,326