Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,300 total · sorted newest first- Sep 13, 2026
Malicious code in jade-opaline-lpu014-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade_8ocua_rm08t_indigo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-nkiam-ubzmk-birch-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jagoan-sejati (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-reef-zme941-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jailthis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade_zk2d3_fcahq_solace (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-tiger-kta074-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jailbreak-ios (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackrobinson (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-3wr62-0nu1x-quill-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacson (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacksonsmith (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacksonthomas (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-aroma-ggg900-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackstewart (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacksonrussell (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-9ay7e-z69th-quill-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacolo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobmartin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-icicle-tau240-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacksmith (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-khkfn-3oyn5-dune-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackroberts (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-labyrinth-cbi629-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobphillips (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobhall (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-brook-dtu833-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackwilson (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobgreen (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-ctogy-92hct-yellow-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacksonking (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacklewis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackmiller (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackieboy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-falcon-hxj855-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobs-tea-archive (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-5xkjj-wz9uc-nymph-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-evxph-beq35-nymph-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacksonmason (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackrust (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-ant-ngf606-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-kite-hge077-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobharrison (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobclark (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobs-soluble-pot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacksonhughes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackholland (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobthomas (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-icicle-jcu267-project (npm)
1 compromised version
Page 382 of 7,326