Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-telur18-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tempe36-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-toge46-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tiwul4-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-telurtahu70-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tek40-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tempe79-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-toge71-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tempe84-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-takokak64-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tek29-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tek77-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-telur56-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tempe13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-takokak52-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tempe4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-telur20-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-taiwan70-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tiwul67-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tiwul25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-telur62-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-telurtahu53-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tiwul46-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tiwul86-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tempe64-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-takokak28-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-taiwan29-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tiwul61-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-toge53-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tempe22-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tempe18-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tek31-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tempe95-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-teh47-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-teh78-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-toge25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tapai39-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tapai87-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tek82-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tek99-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tiwul3-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-telur36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto83-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-serimuka37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahu39-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahu25-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto27-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto26-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sroto92-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahutek89-miaww (npm)
1 compromised version
Page 369 of 7,326