Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-klentik6-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue78-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue47-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue70-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue49-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kripik11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kripik77-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kripik58-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue21-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kolak46-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue25-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue1-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue27-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kolak64-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kripik95-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue31-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kolak34-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue26-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue76-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue5-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue64-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue52-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue24-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kue47-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klentik74-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ketan50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ketoprak94-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kentang95-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kacang58-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keraktelor70-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kepok12-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keripik94-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kentang11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kemplang100-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jus72-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keripik52-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ketan36-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kepok64-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keripik1-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kentang15-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jus66-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klanting66-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ketoprak93-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klanting73-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keripik62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keripik52-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klanting84-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ketoprak33-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keraktelor20-sukiwir (npm)
1 compromised version
Page 377 of 7,326