Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,300 total · sorted newest first- Sep 13, 2026
Malicious code in jaja-buburayam74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brongkos4-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brongkos82-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bika75-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubursumsum68-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brengkes95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubur55-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan85-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan91-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubursumsum39-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubursumsum64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bika88-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brongkos6-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brongkos86-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-dradag86-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-botok99-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-donat88-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bubur26-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan41-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-brengkes93-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakwan87-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jai-surya-varman78 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-asinan35-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-yeti-tns661-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-pench-9oxfr-moonstone-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jagdeepsingh (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jagdlon-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-violet-bfx267-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-mvcaa-kxbl7-knoll-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-wave-gwh666-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-lagoon-rbn931-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-lilypad-zsu336-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-lilypad-exq264-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-ocean-riy100-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-vista-srn315-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaimesim (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-sj5l6-r9kgf-orbit-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-x0xdg-rtaor-crescent-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade_qeg3r_2dcd9_nimbus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade_cdqfy_bcesm_dusk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaeger-ui-monorepo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-xerox-thq913-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jadwal-liga-inggris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaja-bakso2-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-tt6fi-57bah-dusk-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-pinnacle-yws260-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-zufh3-6cldg-lunar-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-twyf4-e9o3i-ultra-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jaibot (npm)
1 compromised version
Page 381 of 7,326