Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Aug 14, 2025
Malicious code in jradius (npm)
- Aug 14, 2025
Malicious code in jr-sha3 (npm)
- Aug 14, 2025
Malicious code in jquey (npm)
- Aug 14, 2025
Malicious code in jquerz (npm)
- Aug 14, 2025
Malicious code in jqueryprotectjs (npm)
- Aug 14, 2025
Malicious code in jquery.ui.widget.js (npm)
1 compromised version
- Aug 14, 2025
Malicious code in jquery.ui.mouse.js (npm)
1 compromised version
- Aug 14, 2025
Malicious code in jquery-ui.ruler (npm)
- Aug 14, 2025
Malicious code in jquery-ui-slider-pips (npm)
- Aug 14, 2025
Malicious code in jquery-ui-i18n (npm)
- Aug 14, 2025
Malicious code in jquery-poolparty (npm)
- Aug 14, 2025
Malicious code in jquery-impromptu (npm)
- Aug 14, 2025
Malicious code in jquery-double-tap-to-go (npm)
- Aug 14, 2025
Malicious code in jquery-app-banner (npm)
- Aug 14, 2025
Malicious code in jquery-2.1 (npm)
- Aug 14, 2025
Malicious code in jqmobile (npm)
- Aug 14, 2025
Malicious code in jqfplwieacbzvrsk (npm)
- Aug 14, 2025
Malicious code in jqeury (npm)
- Aug 14, 2025
Malicious code in jqdc (npm)
- Aug 14, 2025
Malicious code in jqalendar (npm)
- Aug 14, 2025
Malicious code in jq-sha3 (npm)
- Aug 14, 2025
Malicious code in jpknzukxghlvosbc (npm)
- Aug 14, 2025
Malicious code in jphvzudbgfmiyrxt (npm)
- Aug 14, 2025
Malicious code in jparada (npm)
- Aug 14, 2025
Malicious code in jpajxet (npm)
- Aug 14, 2025
Malicious code in jp_postal_codes (npm)
- Aug 14, 2025
Malicious code in jp.oripaone (npm)
1 compromised version
- Aug 14, 2025
Malicious code in joy_zhxtt_yu975_zenith (npm)
- Aug 14, 2025
Malicious code in joy_qvtit_zz7lg_wander (npm)
- Aug 14, 2025
Malicious code in joy_lggkg_opf8t_solstice (npm)
- Aug 14, 2025
Malicious code in joy_kzsfu_djgbf_xylophone (npm)
- Aug 14, 2025
Malicious code in joy_ajgx4_wwrqd_jasmine (npm)
- Aug 14, 2025
Malicious code in joy_9mnpk_yjdfb_kryptonite (npm)
- Aug 14, 2025
Malicious code in joy_4trak_jh2tm_labyrinth (npm)
- Aug 14, 2025
Malicious code in joviology-shelljs-sass-loader-areology (npm)
- Aug 14, 2025
Malicious code in joviology-pulsar-archaeoastronomy-remark (npm)
- Aug 14, 2025
Malicious code in joviology-fomalhaut-superagent-fetch (npm)
- Aug 14, 2025
Malicious code in joviology-capella-aether-stratosphere (npm)
- Aug 14, 2025
Malicious code in jovian-dependencies-test-mui (npm)
- Aug 14, 2025
Malicious code in jotkaimcswdlzqep (npm)
- Aug 14, 2025
Malicious code in josrep (npm)
- Aug 14, 2025
Malicious code in joqlzuvdafibyhpw (npm)
- Aug 14, 2025
Malicious code in joni-tempe96-breki (npm)
- Aug 14, 2025
Malicious code in joni-telurtahu39-breki (npm)
- Aug 14, 2025
Malicious code in joni-telur59-sukiwir (npm)
- Aug 14, 2025
Malicious code in joni-peyek85-sukiwir (npm)
- Aug 14, 2025
Malicious code in joni-otak-otak32-breki (npm)
- Aug 14, 2025
Malicious code in joni-nasicampur34-breki (npm)
- Aug 14, 2025
Malicious code in joni-mieayam13-sukiwir (npm)
- Aug 14, 2025
Malicious code in joni-lepet11-breki (npm)
Page 5976 of 7,326