Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in jillingme (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jgjgig (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jigsaw_uwy3e_clwpf_plume (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jgdzr1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jhashids (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jh-rce-package (npm)
1 compromised version
- GHSA-934h-2r7h-c29mMalwarenpmjhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrxasdadadasdasdadasdasdasdasdSep 13, 2026
Malicious code in jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrxasdadadasdasdadasdasdasdasd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jh-private-package (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiduan-ziwo-jiushiwang (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-zephyr-lbq273-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrxasdadadasdasd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jigsolver (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiandan-mingxiangshu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jh-another-package (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jh-one-awesome-package (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel_z0tl4_70rlp_zephyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jhoothi-main-makkaar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-quasar-wpv095-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiadithas-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jfedmsg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiemi-xiyinli-fazede-zhenxiang (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jfchat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jiazu-zhanxing (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel_1r4i4_u7dsr_quintessence (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-thistle-dot828-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jfisher (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jetpack-custom-fonts (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-5ue47-k2dx1-whisper-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jetty-ocean-vznq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-gorilla-sui317-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-stable (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-delta-bbo611-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-c2ogk-xj2sg-glow-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jestjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-fjord-soh936-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-delta-xbh835-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-izrlu-qnwps-dynamo-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-kiwi-skz312-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-glacier-iia532-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jetpack-js-tools (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-hollow-sle513-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-fqn5p-ojmgf-lotus-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-vortex-ini-foundation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-nugget-cuc525-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jetty-xigua-p5wn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-xenon-virgo-jest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jetty-lettuce-q489 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-hxjd6-wrdqf-willow-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-venus-fetch-firebase (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-nautilus-wyc463-project (npm)
1 compromised version
Page 357 of 7,326