Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-nasicampur12-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi100-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasipecel7-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oblok96-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasiuduk79-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasicampur11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi13-kuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miemee37-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi79-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oblok20-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-oblok40-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miebogor8-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasi14-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mieayam84-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasipecel82-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miebogor84-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mieayam37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-moci15-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-nasipecel89-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mieayam20-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak96-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak82-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mieayam21-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-miebogor76-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mieaceh73-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mieaceh53-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mendoan27-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mendoan68-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mie5-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mie82-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak79-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak7-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-menjes66-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak76-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mie91-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak52-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mieayam72-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak62-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mendut94-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mie30-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mendut18-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak84-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak78-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak63-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangga96-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangut44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangut51-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak39-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lumpur52-wekto (npm)
1 compromised version
Page 374 of 7,326