Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in jimdo-web-library (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke42 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke41 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke34 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke23 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke39 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke48 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke36 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke29 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke33 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke30 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jimmy-poke12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jgltut (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-yjsw3-7iemy-flame-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel_h5ml2_8jxas_verdant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiababe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jhelara-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jfrog-midgard (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jhdesidl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jexnpm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jigsaw_a6r5x_yr1si_lake (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiandehaoren-xinmao (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-reef-bbu982-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jima23-frame-print (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jibo-sdk (npm)
1 compromised version
- GHSA-qpxm-9pp8-22mpMalwarenpmjhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrxasdadadasdasdadasdasdasdasdtestSep 13, 2026
Malicious code in jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrxasdadadasdasdadasdasdasdasdtest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel_igs6f_xm0z2_tundra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiami-jiemi-jishu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel_oergf_whvo8_solstice (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jigsaw_zfcc1_hc9s5_blossom (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiankang-zhidao (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jgjgjgjgjg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jibrilbaguette (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jhipster-transasia-client (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jfrog-asgard (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jigsaw_bvwl7_mar8m_zenith (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiinfo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewwei-devapptea (npm)
1 compromised version
Page 356 of 7,326