Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in jittery_mosquito_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jmorales (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_worm_cyan-80 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiugong-qimen (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_octopus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jmpreader (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_antelope_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jmibody (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jlibredis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_haddock_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_snipe_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_guineafowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jixolx-devapp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_grouse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_loon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jnakfnksnkankknknksngksgksnksgksgksk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_chimpanzee_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_worm_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jmids (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_roundworm_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_raven_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_quelea_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_koi_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_wombat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jjkrtyugh (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jmschirp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_stoat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_mosquito_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jkgithub (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_wallaby_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_shrew_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_hornet_replicate_automation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_macaw_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jnisample (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jltwaiter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jjeg1979-palindrome (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jlibclang (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_mole_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jingtong-vb-heike-biancheng (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiopeyrie (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jingtong-heike-miansha (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jinqitest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jingtong-pojie-gongju (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jios (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery-tan-ptarmigan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery_caribou_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jittery-violet-bat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke46 (npm)
1 compromised version
Page 354 of 7,326