Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,285 total · sorted newest first- Sep 13, 2026
Malicious code in janus-ursa-rimraf-telesto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-wezen-firebase-xanthus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-ophiuchus-markdownlint-indus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-rocket-helmet-framework (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-mysql-delphinus-convict (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-proxima-commitizen-auriga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-private-phoebe-dotenv-parse-variables (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-regulus-eclipse-castor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-mysql-koa-unuk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-sedna-quito-cressida (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-radiant-avior-quito (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-rocket-crust-xerxes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-sirius-nashira-npm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-meissa-async-concurrently (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-winston-carina-barnard (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janetest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-lynx-nebula-astro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-babel-reveal-md-antares (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-firebase-mdx-supervisor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-antd-babel-kastra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-airbnb-cypress-wasat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-europa-luna-charon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-foundation-sociobiology-archaeoastronomy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jambalaya-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-genomics-less-publish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-cors-non-blocking-jwt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jamplay-web (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-avior-superagent-ichnology (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-dagda-query-ceres (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-grunt-gatsby-lynx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-dorado-repository-soap (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-callisto-colors-mocha (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jannat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-gridsome-europa-magnetosphere (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-capella-chakra-ui-virgo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-gravity-npm-proxima (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jameelnoor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-magellan-quark-airbnb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-aldebaran-middleware-paleontology (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janahw (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-enif-tardigrade-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-aquarius-perseus-lint (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-centaurus-mutation-koa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jamelchocolat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-elara-draco-chariklo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-apex-writable-graphql (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-firebase-postcss-loader-cygnus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jamplay-photon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-meissa-avior-playwright (npm)
1 compromised version
- Sep 13, 2026
Malicious code in janus-install-bunyan-sync (npm)
1 compromised version
Page 367 of 7,326