Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,285 total · sorted newest first- Sep 13, 2026
Malicious code in jealous_capybara_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous_firefly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jeep-poke17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous_octopus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jeep-poke25 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jeep-poke22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous_yak_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous_flea_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous_pike_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jeep-poke12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jc-sha3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jbeeec-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jawadali (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jcyooy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jdb.js (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jcterm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jb-abtest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jawadameen (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jddfdsdmadgktestdjjtema (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous-jade-gibbon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in javatres (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jdctest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous-pink-unicorn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jbsignal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous-apricot-skunk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jcatalog-react-fixed-data-table (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jawema (npm)
1 compromised version
- Sep 13, 2026
Malicious code in je-hentai-anime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jayaff (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous_aphid_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous-green-whale (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jcrmtvxbeksqdaiu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jawadahmed (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jcr-hopper (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jayo555 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jd7x4x (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jcxgnj-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jawadabdul (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous-olive-cod (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jblank (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jchatsock (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jdevice-nodejs-sdk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jczmew-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jayparser (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jealous-coffee-trout (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaydocs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jcqwzd-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jbspacer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaxproc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jcqkdgtzykohwrun (npm)
1 compromised version
Page 362 of 7,326