Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-jamblang32-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jus19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jamblang31-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getas10-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-kacang22-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ikan29-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gudeg21-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jus59-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getas77-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-ikan11-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gudeg44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-getuk83-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gepuk50-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-jengkol6-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gudeg11-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gulai8-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gorengan19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gepuk22-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-esdoger24-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal52-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-esdoger88-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-enting7-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gado-gado36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal96-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gepuk22-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gandul73-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gembus45-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gaplek44-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gaplek51-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal90-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal62-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-enting29-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gembus41-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gandul95-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gado-gado61-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gepuk11-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal76-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal60-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gaplek44-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-esdoger100-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal84-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-esdoger35-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gado-gado78-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gandul67-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-esdoger76-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-esdoger52-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gandul100-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal5-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-gandul40-sukiwir (npm)
1 compromised version
Page 379 of 7,326