Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,285 total · sorted newest first- Sep 13, 2026
Malicious code in jardich (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-honeycomb-gqh758-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-iguana-sjx682-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-figures-geomorphology-karma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-cypress-gravity-install (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-amber-fmb366-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-jade-qff900-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-icicle-yqx861-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jarwohokyah (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-95hol-ljr88-azure-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jarwohoktea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-fetch-standard-terser-webpack-plugin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-btnb2-flgxz-yonder-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-antimatter-toml-photon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jasmine-jellyfish-ovp374-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-ora-odin-fusion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-react-bootstrap-less-loader-biomimicry (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-sails-repository-repository (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-xerxes-hexo-leda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-scorpius-gemini-gravitationalwave (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-prettier-stylelint-cross-env-server (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-nightmare-proxima-materialize (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-planetology-neutronstar-start (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-query-lint-staged-celeste (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-sails-janus-yonder (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-soap-lyra-cosmochemistry (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-remark-thuban-sails (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-postcss-loader-element-ui-spectron (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-webdriver-manager-promise-aquarius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-neptune-spectron-publish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-jekyll-parcel-dotenv-safe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-selenium-async-sails (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-phoebe-frontend-configstore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-style-loader-alphard-remark (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-vuepress-arcturus-soap (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-paleoanthropology-carpo-quasarjet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-meteor-toml-oauth (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-nightwatch-aquarius-json (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-repository-acamar-jekyll (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-sedimentology-higgs-biohacking (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-sagitta-arcturus-semantic-release (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-server-aurora-phoebe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-nightwatch-library-antd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-meissa-duplex-airbnb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-winston-mensa-sadr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-tethys-meteor-comet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-petrology-sedimentology-polaris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-writable-warp-altair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-slidev-typeorm-ini (npm)
1 compromised version
Page 366 of 7,326