Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Aug 14, 2025
Malicious code in just-a-browserify-server (npm)
- Aug 14, 2025
Malicious code in juqbot (npm)
- Aug 14, 2025
Malicious code in jupiter-whiskey-274n (npm)
- Aug 14, 2025
Malicious code in jupiter-ugli-rmwp (npm)
- Aug 14, 2025
Malicious code in jupiter-teak-lsdh (npm)
- Aug 14, 2025
Malicious code in jupiter-rainbow-9ldu (npm)
- Aug 14, 2025
Malicious code in jupiter-pine-7smw (npm)
- Aug 14, 2025
Malicious code in jupiter-larch-zajd (npm)
- Aug 14, 2025
Malicious code in jupiter-kangaroo-39yk (npm)
- Aug 14, 2025
Malicious code in jupiter-javascript-corvus-dendrochronology (npm)
- Aug 14, 2025
Malicious code in jupiter-deneb-galaxy-greatfilter (npm)
- Aug 14, 2025
Malicious code in jupiter-charlie-dzri (npm)
- Aug 14, 2025
Malicious code in jupiter-asthenosphere-loop-janus (npm)
- Aug 14, 2025
Malicious code in juno-venus-rate-limiter-tectonophysics (npm)
- Aug 14, 2025
Malicious code in juno-venus-figures-hugo (npm)
- Aug 14, 2025
Malicious code in juno-seismology-socketio-electron (npm)
- Aug 14, 2025
Malicious code in juno-photon-nebula-sublimation (npm)
- Aug 14, 2025
Malicious code in juno-package-ursa-less-loader (npm)
- Aug 14, 2025
Malicious code in juno-outercore-bootes-chariklo (npm)
- Aug 14, 2025
Malicious code in juno-eclipse-pegasus-cygnus (npm)
- Aug 14, 2025
Malicious code in juno-commitizen-singularity-xanadu (npm)
- Aug 14, 2025
Malicious code in junk-test-foobar (npm)
- Aug 14, 2025
Malicious code in juniper-yurt-ntnn (npm)
- Aug 14, 2025
Malicious code in juniper-violet-x6wa (npm)
- Aug 14, 2025
Malicious code in juniper-shack-u4r9 (npm)
- Aug 14, 2025
Malicious code in juniper-rnybe-ltjsj-xenon-project (npm)
- Aug 14, 2025
Malicious code in juniper-qkovo-376h4-basil-project (npm)
- Aug 14, 2025
Malicious code in juniper-ptlq0-eehu6-unicorn-project (npm)
- Aug 14, 2025
Malicious code in juniper-oscar-767e (npm)
- Aug 14, 2025
Malicious code in juniper-nebula-4uxt (npm)
- Aug 14, 2025
Malicious code in juniper-fah84-ijunr-azure-project (npm)
- Aug 14, 2025
Malicious code in juniper-d56jv-cxw2t-yeti-project (npm)
- Aug 14, 2025
Malicious code in juniper-bh4os-1faa8-lucid-project (npm)
- Aug 14, 2025
Malicious code in juniper-ba0fw-z3snk-opal-project (npm)
- Aug 14, 2025
Malicious code in juniper-agyge-g9qtz-glow-project (npm)
- Aug 14, 2025
Malicious code in juniper-a7ce1-utbt8-rose-project (npm)
- Aug 14, 2025
Malicious code in jungle_wo2d8_qtgjw_reef (npm)
- Aug 14, 2025
Malicious code in jungle_tv1va_uk75e_banyan (npm)
- Aug 14, 2025
Malicious code in jungle_c3r3f_pqkjf_antelope (npm)
- Aug 14, 2025
Malicious code in jungle_4wnfa_owrem_quarry (npm)
- Aug 14, 2025
Malicious code in jungle-yeti-ndk502-project (npm)
- Aug 14, 2025
Malicious code in jungle-xylophone-jcox (npm)
- Aug 14, 2025
Malicious code in jungle-xenon-nux357-project (npm)
- Aug 14, 2025
Malicious code in jungle-waterfall-xck202-project (npm)
- Aug 14, 2025
Malicious code in jungle-thunder-fko445-project (npm)
- Aug 14, 2025
Malicious code in jungle-r1kay-gw0aj-frost-project (npm)
- Aug 14, 2025
Malicious code in jungle-paradise-vkl719-project (npm)
- Aug 14, 2025
Malicious code in jungle-orange-j6im (npm)
- Aug 14, 2025
Malicious code in jungle-nectarine-ynp1 (npm)
- Aug 14, 2025
Malicious code in jungle-mist-ldk173-project (npm)
Page 5972 of 7,326