Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,300 total · sorted newest first- Sep 13, 2026
Malicious code in jacksonwilson (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacobroberts (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-cliff-qbk511-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-kale-dbf462-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jade-cherry-ulw384-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackdavies (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-terser-webpack-plugin-achernar-radiant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-bootes-nebula-seismology (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-deimos-fornax-webdriver-mocha (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-umbriel-io-soap (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacket-wave-qep731-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-callback-lacerta-wasat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-nuxtjs-spica-loopback (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-miranda-standard-achernar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-semantic-ui-development-development (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-chariklo-odin-zephyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-eclipse-hexo-pipe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-colors-parsec-chromedriver (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacket-hill-lrm508-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jack-teadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-titan-eslint-config-equinox (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackharris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-hapi-eslint-config-centauri (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-stop-fork-andromeda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacelizabethturnerkmiller (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacket-brook-cim504-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-despina-ganymede-indus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-farout-xanthus-adonis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-server-chakra-ui-antimatter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-leda-install-eslint-config (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-pegasus-umbriel-perseus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacket-arctic-dwo959-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-eridanus-jupiter-hugo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacket-paradise-ahm955-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-cressida-eridanus-loglevel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-odin-castor-lynx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-chakra-ui-pino-chromedriver (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-foundation-auth-sails (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacket-ocean-wds111-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jackdixon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-node-sass-neptune-sirius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-loop-corvus-style-loader (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-prettier-plugin-markdown-dotenv-betelgeuse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-gulp-cross-env-magellan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacket-peacock-hjy273-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-phoebe-parcel-koa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-release-it-enceladus-jest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-spectron-webdriver-procyon-enceladus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jabbah-gravity-spectron-webdriver-cassini (npm)
1 compromised version
- Sep 13, 2026
Malicious code in jacinto-teadev (npm)
1 compromised version
Page 383 of 7,326