Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-semur32-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sego88-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambalado67-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sate60-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sate78-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sego60-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel42-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sasag63-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sasag40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel25-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur45-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel82-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur98-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sasag38-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sego35-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sate51-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-saguer84-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sego73-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur99-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur41-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel40-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sasag25-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-semur70-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel89-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sego85-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambalado77-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel97-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sego95-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sate54-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-sambel2-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rawon62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rojak38-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujak46-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ragi24-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rawon54-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujak57-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ruwet35-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujaksoto48-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangi10-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ronde43-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangginang100-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujaksoto97-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ronde63-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ronde46-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ronde67-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ragi13-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangi96-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujak29-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangi18-sluey (npm)
1 compromised version
Page 371 of 7,326