Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,287 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-gandul40-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-esdoger7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal91-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-esdoger98-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-enting60-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-esdoger69-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brengkes43-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brengkes84-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-dodol83-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-botok13-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-dradag4-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-asinan64-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan38-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-botok57-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-dodol36-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brongkos28-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-buburayam24-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-botok97-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal47-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan94-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal20-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bika67-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubur63-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-donat34-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-empal29-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-donat22-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-donat64-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bika28-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bika75-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan16-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brengkes27-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubur18-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-asinan63-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-asinan19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-donat89-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-donat57-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-buburayam74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brongkos4-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brongkos82-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bika75-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubursumsum68-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brengkes95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubur55-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan85-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan91-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubursumsum39-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubursumsum64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bika88-riris (npm)
1 compromised version
Page 380 of 7,326