Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-tahutek16-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahu27-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-serabi66-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahu17-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sroto77-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahutek75-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-serimuka98-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahu98-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto45-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto41-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahutek86-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto87-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto82-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sroto43-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto81-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sroto7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto58-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto29-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahu91-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto68-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-serabi13-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahutek31-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sroto30-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto9-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-serabi60-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto94-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahutek73-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-soto8-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-tahu87-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-serabi9-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sate36-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur28-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-saguer19-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur34-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel21-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sasag53-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-saguer61-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sate93-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-serabi49-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambalado83-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sate50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-serabi10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sate13-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel86-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel4-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur63-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur35-apidev (npm)
1 compromised version
Page 370 of 7,326