Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in joee-banut-imubuir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish--march-28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joelma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint-blue-mouse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joee-banut-imubir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joee-ba-imu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-kapitel-4-ganzer-film-auf-deutsch (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-4-pelicula-comple-ta-online-es-espanol-latino-gratis247 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joee-banut-imur (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joddoc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-chapter-4-full-movies-online-at-home-today (npm)
1 compromised version
- GHSA-jwq8-w34r-xx2hMalwarenpmjohn-wick-capitulo-4-pelicula-completa-en-linea-descarga-gratuita-en-123moviesSep 13, 2026
Malicious code in john-wick-capitulo-4-pelicula-completa-en-linea-descarga-gratuita-en-123movies (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_crawdad_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in job-iteration (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-4-2023-la-mejor-neova-pelicula-4-k--en-casa-en-lienia-love (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint-magenta-primate (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joenaskgrbpvyuxd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jobaline (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jobpoint (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish--marzo-27-30 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jobweibo (npm)
1 compromised version
- GHSA-cv2r-qv8w-vrqxMalwarenpmjohn-wick-4-2023-la-mejor-neova-pelicula-4-k--en-casa-en-lienia-lliena-loveSep 13, 2026
Malicious code in john-wick-4-2023-la-mejor-neova-pelicula-4-k--en-casa-en-lienia-lliena-love (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jodtaar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joee-banut-imubuabir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-4-2023-la-mejor-neova-pelicula-4-k--en-casa-en-lienia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-chapter-4-movie-online-free-movies (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joaosilva (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jobcard (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint-amber-bovid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jnmirdcugstvxqaz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jobcomp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-chapter-4-2023-streaming-online-on-123movies (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joee-bau-imu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish--march-27 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_crab_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jobmeety (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joaovictor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joee-banut-imubr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joee-baut-imu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_centipede_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in job-specs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_alpaca_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in john-wick-chapter-4-full-movies-online-at-homes-hq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_canid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_dinosaur_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joint_carp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jnitest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_orca_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_lamprey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_whale-silentdev (npm)
1 compromised version
Page 353 of 7,326