Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-lengko50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis59-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kupat97-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lontong51-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kupang19-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lodeh95-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lepet71-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue89-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue87-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis10-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis28-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis93-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lepet27-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kupang71-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis49-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lepet50-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis26-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis19-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-liwet19-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kupang2-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue98-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lapis93-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lontong98-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lepet17-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-lengko59-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-liwet40-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klentik38-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue45-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue35-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue18-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue41-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kolak34-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue52-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klentik9-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klipo39-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue71-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klipo7-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klipo45-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue28-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue6-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klipo58-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue34-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klanting97-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue14-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue32-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klentik81-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue24-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kripik90-ruro (npm)
1 compromised version
Page 376 of 7,326