Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,270 total · sorted newest first- Aug 14, 2025
Malicious code in jetty-ocean-vznq (npm)
- Aug 14, 2025
Malicious code in jetty-lettuce-q489 (npm)
- Aug 14, 2025
Malicious code in jetty-carrot-tdb4 (npm)
- Aug 14, 2025
Malicious code in jetty-blackhole-fpot (npm)
- Aug 14, 2025
Malicious code in jetpack-js-tools (npm)
- Aug 14, 2025
Malicious code in jetcms (npm)
- Aug 14, 2025
Malicious code in jestjs (npm)
- Aug 14, 2025
Malicious code in jest-sync-json-reporter (npm)
- Aug 14, 2025
Malicious code in jest-nextjs-wormhole-hadron (npm)
- Aug 14, 2025
Malicious code in jest-mocha-parcel-hyperion (npm)
- Aug 14, 2025
Malicious code in jest-miranda-child-process-deneb (npm)
- Aug 14, 2025
Malicious code in jest-eslint-plugin-fomalhaut-quasar (npm)
- Aug 14, 2025
Malicious code in jermiah (npm)
- Aug 14, 2025
Malicious code in jenkins-master (npm)
- Aug 14, 2025
Malicious code in jeminis (npm)
- Aug 14, 2025
Malicious code in jellyfish-yellow-dar237-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-waterfall-xwl317-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-umbra-jgp412-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-reef-rco151-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-oak-hrf615-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-lilypad-urf910-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-giraffe-lxp049-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-dragon-rqn676-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-cloud-gpo655-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-bonfire-tuv847-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-bamboo-zhn735-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-arctic-chz647-project (npm)
- Aug 14, 2025
Malicious code in jellyderp (npm)
- Aug 14, 2025
Malicious code in jekyll-thermochronology-farout-sagitta (npm)
- Aug 14, 2025
Malicious code in jekyll-cypress-exobiology-miranda (npm)
- Aug 14, 2025
Malicious code in jekpress (npm)
- Aug 14, 2025
Malicious code in jefftrax (npm)
- Aug 14, 2025
Malicious code in jeetbad (npm)
- Aug 14, 2025
Malicious code in jedismash (npm)
- Aug 14, 2025
Malicious code in jdevice-nodejs-sdk (npm)
- Aug 14, 2025
Malicious code in jddfdsdmadgktestdjjtema (npm)
- Aug 14, 2025
Malicious code in jdctest (npm)
- Aug 14, 2025
Malicious code in jdcbrkytsvfimwhg (npm)
- Aug 14, 2025
Malicious code in jdb.js (npm)
- Aug 14, 2025
Malicious code in jd7x4x (npm)
- Aug 14, 2025
Malicious code in jcterm (npm)
- Aug 14, 2025
Malicious code in jcrmtvxbeksqdaiu (npm)
- Aug 14, 2025
Malicious code in jcqkdgtzykohwrun (npm)
- Aug 14, 2025
Malicious code in jcicorereturnservice (npm)
- Aug 14, 2025
Malicious code in jchatsock (npm)
- Aug 14, 2025
Malicious code in jcatalog-react-reference-search (npm)
- Aug 14, 2025
Malicious code in jcatalog-react-fixed-data-table (npm)
- Aug 14, 2025
Malicious code in jc-sha3 (npm)
- Aug 14, 2025
Malicious code in jbspacer (npm)
- Aug 14, 2025
Malicious code in jbsignal (npm)
Page 5979 of 7,326