Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,270 total · sorted newest first- Aug 14, 2025
Malicious code in jasmine-whale-pvs490-project (npm)
- Aug 14, 2025
Malicious code in jasmine-wave-bfy074-project (npm)
- Aug 14, 2025
Malicious code in jasmine-waterfall-paz932-project (npm)
- Aug 14, 2025
Malicious code in jasmine-waterfall-iqc218-project (npm)
- Aug 14, 2025
Malicious code in jasmine-vortex-znm895-project (npm)
- Aug 14, 2025
Malicious code in jasmine-tornado-kvy749-project (npm)
- Aug 14, 2025
Malicious code in jasmine-tiger-agm120-project (npm)
- Aug 14, 2025
Malicious code in jasmine-stream-element-ui-config (npm)
- Aug 14, 2025
Malicious code in jasmine-quagmire-ivu514-project (npm)
- Aug 14, 2025
Malicious code in jasmine-nymph-cxc922-project (npm)
- Aug 14, 2025
Malicious code in jasmine-nni8i-sfaqw-night-project (npm)
- Aug 14, 2025
Malicious code in jasmine-nectar-dtg648-project (npm)
- Aug 14, 2025
Malicious code in jasmine-lagoon-lqr805-project (npm)
- Aug 14, 2025
Malicious code in jasmine-lagoon-dbn414-project (npm)
- Aug 14, 2025
Malicious code in jasmine-koala-qpt182-project (npm)
- Aug 14, 2025
Malicious code in jasmine-jellyfish-ovp374-project (npm)
- Aug 14, 2025
Malicious code in jasmine-jade-qff900-project (npm)
- Aug 14, 2025
Malicious code in jasmine-isk3f-3nhks-yonder-project (npm)
- Aug 14, 2025
Malicious code in jasmine-iguana-sjx682-project (npm)
- Aug 14, 2025
Malicious code in jasmine-icicle-yqx861-project (npm)
- Aug 14, 2025
Malicious code in jasmine-honeycomb-gqh758-project (npm)
- Aug 14, 2025
Malicious code in jasmine-galaxy-biosignature-envconfig (npm)
- Aug 14, 2025
Malicious code in jasmine-figures-geomorphology-karma (npm)
- Aug 14, 2025
Malicious code in jasmine-fa9xc-1l58a-zen-project (npm)
- Aug 14, 2025
Malicious code in jasmine-everest-aez381-project (npm)
- Aug 14, 2025
Malicious code in jasmine-despina-cosmology-redshift (npm)
- Aug 14, 2025
Malicious code in jasmine-configstore-nashira-zenobia (npm)
- Aug 14, 2025
Malicious code in jasmine-caravan-hpp091-project (npm)
- Aug 14, 2025
Malicious code in jasmine-butterfly-atz507-project (npm)
- Aug 14, 2025
Malicious code in jasmine-buffalo-qxi708-project (npm)
- Aug 14, 2025
Malicious code in jasmine-btnb2-flgxz-yonder-project (npm)
- Aug 14, 2025
Malicious code in jasmine-aspen-nbi430-project (npm)
- Aug 14, 2025
Malicious code in jasmine-aroma-ubc027-project (npm)
- Aug 14, 2025
Malicious code in jasmine-antimatter-toml-photon (npm)
- Aug 14, 2025
Malicious code in jasmine-amber-fmb366-project (npm)
- Aug 14, 2025
Malicious code in jasmine-95hol-ljr88-azure-project (npm)
- Aug 14, 2025
Malicious code in jasmine-55rex-dvyzu-paradise-project (npm)
- Aug 14, 2025
Malicious code in jardich (npm)
- Aug 14, 2025
Malicious code in japanese_banks (npm)
- Aug 14, 2025
Malicious code in janus-soap-lyra-cosmochemistry (npm)
- Aug 14, 2025
Malicious code in janus-sails-janus-yonder (npm)
- Aug 14, 2025
Malicious code in janus-postcss-loader-element-ui-spectron (npm)
- Aug 14, 2025
Malicious code in janus-paleoanthropology-carpo-quasarjet (npm)
- Aug 14, 2025
Malicious code in janus-meteor-toml-oauth (npm)
- Aug 14, 2025
Malicious code in janus-gridsome-europa-magnetosphere (npm)
- Aug 14, 2025
Malicious code in janus-genomics-less-publish (npm)
- Aug 14, 2025
Malicious code in janus-foundation-sociobiology-archaeoastronomy (npm)
- Aug 14, 2025
Malicious code in jannat (npm)
- Aug 14, 2025
Malicious code in janetest (npm)
- Aug 14, 2025
Malicious code in jamplay-web (npm)
Page 5981 of 7,326