Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-ronde56-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ragi44-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ragi87-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangi86-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangi50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-pisang2-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangginang27-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujak74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rawon83-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-pisang56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangginang4-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ronde6-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ruwet50-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangi95-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujaksoto67-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ronde47-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rawon74-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ronde39-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ruwet57-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangginang32-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ragi78-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ragi35-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ronde69-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujak22-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujaksoto43-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rendang42-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ronde49-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangi31-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rujaksoto49-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ruwet34-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rawon32-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rangginang68-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rawon8-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ruwet87-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-rawon95-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ragi47-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-papeda31-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-otak-otak42-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oncom21-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oncom24-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ongol-ongol65-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oncom72-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-otak-otak15-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ongol-ongol15-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-pecel37-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-pecel88-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oncom40-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oncom14-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-otak-otak11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-otak-otak14-sukiwir (npm)
1 compromised version
Page 372 of 7,326