Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in jetty-carrot-tdb4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jetty-blackhole-fpot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jetty-shack-fmik (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-opaline-mac025-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jewel-case (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jetcms (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-miranda-child-process-deneb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jerry1319 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jeromy-tea-archive (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-prompts-node-config-bunyan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jermiah (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-epimetheus-kinetic-sagitta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jenkins-trigger-action (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-testcafe-stop-mutation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jessicamurphy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jenkins-trigger-actio (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-mdx-aurora-scorpius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-corvus-prettier-plugin-markdown-charon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-slidev-express-cygnus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jenkins-master (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-solis-aldebaran-markdownlint (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-forever-adonis-orbit (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jeromy-soluble-pot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-airbnb-remark-spawn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-castor-stream-altair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-heka-wasat-rimraf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-nextjs-wormhole-hadron (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-mocha-parcel-hyperion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-titan-postcss-loader-galaxy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-markdown-loopback-superagent (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-electron-leda-electron (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jerrytestjerry (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jenkinslogger (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-betelgeuse-yakutsk-meteor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-astro-despina-aurora (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-formatting (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-cucumber-reporter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-flare-less-cli (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-sass-loader-axios-algol (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-wezen-corvus-nuxtjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-sync-json-reporter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-cygnus-chariklo-rimraf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-weywot-leda-stream (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jessicaanderson (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-rigel-postcss-loader-sqlite (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-config-ibm-cloud-cognitive (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-hermes-configstore-supervisor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-pegasus-nightwatch-blaze (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-eslint-plugin-fomalhaut-quasar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jest-meteor-centaurus-barnard (npm)
1 compromised version
Page 358 of 7,326