Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,285 total · sorted newest first- Sep 13, 2026
Malicious code in jasmine-waterfall-paz932-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-xenon-solis-sedna (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine_9nnaq_beblx_ember (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-nni8i-sfaqw-night-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-spectron-andromeda-quark (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-query-yildun-dynamo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-nectar-dtg648-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-stream-element-ui-config (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine_a9gho_9fr2f_drizzle (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-procyon-capella-jekyll (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-lagoon-dbn414-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-unicorn-lyo115-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-ursa-resolvers-auth (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-whirlpool-wbx348-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-tiger-agm120-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-uglify-js-cygnus-markdown (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-quagmire-ivu514-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-prettier-stylelint-dependencies-europa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-version-procyon-perseus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-whale-pvs490-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-pegasus-ganymede-process (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-lagoon-lqr805-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-galaxy-biosignature-envconfig (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-dione-antares-envconfig (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-bulma-janus-package (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-iota-apollo-postcss (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-arcturus-pegasus-resolvers (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-kaus-antares-bellatrix (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-everest-aez381-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-caravan-hpp091-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in japanese_banks (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-draco-winston-castor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-aroma-ubc027-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-buffalo-qxi708-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-bunyan-hydra-celeste (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-fa9xc-1l58a-zen-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-configstore-nashira-zenobia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-grus-nightwatch-dotenv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-isk3f-3nhks-yonder-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-geochemistry-markdown-sirius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-ichnology-astro-proteomics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-karma-innercore-csrf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-koala-qpt182-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-fomalhaut-changelog-supervisor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-aspen-nbi430-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-gatsby-lint-meissa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-carpo-scorpius-halley (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-butterfly-atz507-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-55rex-dvyzu-paradise-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-despina-cosmology-redshift (npm)
1 compromised version
Page 365 of 7,326