Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-kembang23-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kentang37-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ketan64-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keripik10-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kembang2-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keripik40-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kembang92-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kemplang73-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kentang90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ketoprak57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ketan67-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ketan77-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kembang31-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klanting67-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-keripik42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-klanting52-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kembang67-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kentang90-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ikan40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gulai1-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gudeg27-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jengkol91-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gorengan76-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jus43-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gudeg87-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ikan33-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gulai7-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ikan45-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jamblang14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jus9-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ikan91-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gorengan22-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getuk28-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getas81-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jengkol59-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gorengan69-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gulai3-rudi0x (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ikan69-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gepuk51-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getuk51-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jamblang63-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gorengan81-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jengkol88-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gepuk99-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getuk43-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kacang40-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gudeg53-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getas88-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getas55-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getas21-riris (npm)
1 compromised version
Page 378 of 7,326