Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-pecel80-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-pecel75-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-peyek5-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-pecel22-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-peyek33-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-otak-otak76-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-otak-otak1-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ongol-ongol31-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-peyek36-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-papeda29-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-otak-otak37-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-peyek59-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ongol-ongol24-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oncom69-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-otak-otak40-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-otak-otak4-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-papeda53-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-peyek8-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oncom8-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ongol-ongol45-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-peyek40-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ongol-ongol94-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-pecel54-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-pecel67-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oblok44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasicampur9-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi50-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oblok16-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miemee71-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miebogor69-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasipecel43-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miebogor75-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miebogor23-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miemee88-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi20-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasiuduk37-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-naget46-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi27-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-moci11-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oblok90-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi93-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi71-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-moci35-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasisayur94-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi87-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasisayur20-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miemee99-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miemee37-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasipecel54-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-naget46-miaww (npm)
1 compromised version
Page 373 of 7,326