Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 13, 2026
Malicious code in jelek-rass-batu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasis-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasi-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasa-batubata (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasaaya-nu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-giraffe-lxp049-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasaa-batubata (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jele-hentai-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-oak-hrf615-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasis-batu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasismem-b (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-ras-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-bamboo-zhn735-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish_black-61-tisubasah (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasisme-batu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-umbra-jgp412-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasismem-bat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-ras-batub (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasisme-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasismem-anim (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-yellow-dar237-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-ra-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasaaya-nurses (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-cloud-gpo655-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasaaya-batubata (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-hentai-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-ras-batu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasismem-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-ras-batubata (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-arctic-chz647-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-dolphin-art145-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasaaya-nurs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jeminis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-r-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-bonfire-tuv847-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasismem-an (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-reef-rco151-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jele-rasaaya-nurses (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-ras-batuba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasismem-batu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasaaya-n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasaaya-nurse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasismem-ani (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jel-hentai-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasismem-ba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-waterfall-xwl317-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasismem-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jelek-rasism-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-lilypad-urf910-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jellyfish-dragon-rqn676-project (npm)
1 compromised version
Page 359 of 7,326