Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-lumpur65-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak20-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lontong84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangut29-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangga82-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak19-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangga95-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangut50-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangga61-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lupis52-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lontong69-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangut21-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lontong47-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangut29-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lupis11-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lutis2-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangga19-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangut3-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lutis9-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangut17-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangga30-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lontong94-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangut36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lutis80-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-mangga16-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-martabak4-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis90-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis30-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lontong36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis43-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue80-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lepet27-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lodeh27-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kupang62-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis17-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lengko64-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-liwet67-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kupang34-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis68-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lepet20-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue79-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kupang22-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue99-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis44-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis56-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lengko5-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis56-sluey (npm)
1 compromised version
Page 375 of 7,326