Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Aug 14, 2025
Malicious code in jimmis (npm)
- Aug 14, 2025
Malicious code in jimdo-web-library (npm)
- Aug 14, 2025
Malicious code in jimbooth (npm)
- Aug 14, 2025
Malicious code in jima23-frame-print (npm)
- Aug 14, 2025
Malicious code in jillingme (npm)
- Aug 14, 2025
Malicious code in jiinfo (npm)
- Aug 14, 2025
Malicious code in jigsolver (npm)
- Aug 14, 2025
Malicious code in jigsaw_zfcc1_hc9s5_blossom (npm)
- Aug 14, 2025
Malicious code in jigsaw_uwy3e_clwpf_plume (npm)
- Aug 14, 2025
Malicious code in jigsaw_a6r5x_yr1si_lake (npm)
- Aug 14, 2025
Malicious code in jiduan-ziwo-jiushiwang (npm)
- Aug 14, 2025
Malicious code in jibo-sdk (npm)
- Aug 14, 2025
Malicious code in jiandehaoren-xinmao (npm)
- Aug 14, 2025
Malicious code in jiami-jiemi-jishu (npm)
- Aug 14, 2025
Malicious code in jiababe (npm)
- Aug 14, 2025
Malicious code in jhipster-transasia-client (npm)
- Aug 14, 2025
Malicious code in jhdesidl (npm)
- Aug 14, 2025
Malicious code in jhashids (npm)
- Aug 14, 2025
Malicious code in jh-rce-package (npm)
- Aug 14, 2025
Malicious code in jh-private-package (npm)
- Aug 14, 2025
Malicious code in jh-one-awesome-package (npm)
- Aug 14, 2025
Malicious code in jh-another-package (npm)
- Aug 14, 2025
Malicious code in jgltut (npm)
- Aug 14, 2025
Malicious code in jgjgjgjgjg (npm)
- Aug 14, 2025
Malicious code in jgjgig (npm)
- Aug 14, 2025
Malicious code in jgdzr1 (npm)
- Aug 14, 2025
Malicious code in jfrog-midgard (npm)
- Aug 14, 2025
Malicious code in jfrog-asgard (npm)
- Aug 14, 2025
Malicious code in jfisher (npm)
- Aug 14, 2025
Malicious code in jfedmsg (npm)
- Aug 14, 2025
Malicious code in jfchat (npm)
- Aug 14, 2025
Malicious code in jexnpm (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in jewel_z0tl4_70rlp_zephyr (npm)
- Aug 14, 2025
Malicious code in jewel_igs6f_xm0z2_tundra (npm)
- Aug 14, 2025
Malicious code in jewel_h5ml2_8jxas_verdant (npm)
- Aug 14, 2025
Malicious code in jewel-zephyr-lbq273-project (npm)
- Aug 14, 2025
Malicious code in jewel-yjsw3-7iemy-flame-project (npm)
- Aug 14, 2025
Malicious code in jewel-thistle-dot828-project (npm)
- Aug 14, 2025
Malicious code in jewel-reef-bbu982-project (npm)
- Aug 14, 2025
Malicious code in jewel-quasar-wpv095-project (npm)
- Aug 14, 2025
Malicious code in jewel-opaline-mac025-project (npm)
- Aug 14, 2025
Malicious code in jewel-nugget-cuc525-project (npm)
- Aug 14, 2025
Malicious code in jewel-nautilus-wyc463-project (npm)
- Aug 14, 2025
Malicious code in jewel-kiwi-skz312-project (npm)
- Aug 14, 2025
Malicious code in jewel-izrlu-qnwps-dynamo-project (npm)
- Aug 14, 2025
Malicious code in jewel-hxjd6-wrdqf-willow-project (npm)
- Aug 14, 2025
Malicious code in jewel-hollow-sle513-project (npm)
- Aug 14, 2025
Malicious code in jewel-gorilla-sui317-project (npm)
- Aug 14, 2025
Malicious code in jewel-fqn5p-ojmgf-lotus-project (npm)
- Aug 14, 2025
Malicious code in jewel-fjord-soh936-project (npm)
Page 5978 of 7,326