Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,270 total · sorted newest first- Aug 14, 2025
Malicious code in jade-evxph-beq35-nymph-project (npm)
- Aug 14, 2025
Malicious code in jade-ctogy-92hct-yellow-project (npm)
- Aug 14, 2025
Malicious code in jade-cherry-ulw384-project (npm)
- Aug 14, 2025
Malicious code in jade-brook-dtu833-project (npm)
- Aug 14, 2025
Malicious code in jade-aroma-ggg900-project (npm)
- Aug 14, 2025
Malicious code in jade-ant-ngf606-project (npm)
- Aug 14, 2025
Malicious code in jade-9ay7e-z69th-quill-project (npm)
- Aug 14, 2025
Malicious code in jade-5xkjj-wz9uc-nymph-project (npm)
- Aug 14, 2025
Malicious code in jade-3wr62-0nu1x-quill-project (npm)
- Aug 14, 2025
Malicious code in jacson (npm)
- Aug 14, 2025
Malicious code in jacolo (npm)
- Aug 14, 2025
Malicious code in jackrust (npm)
- Aug 14, 2025
Malicious code in jackieboy (npm)
- Aug 14, 2025
Malicious code in jacket-wave-qep731-project (npm)
- Aug 14, 2025
Malicious code in jacket-peacock-hjy273-project (npm)
- Aug 14, 2025
Malicious code in jacket-paradise-ahm955-project (npm)
- Aug 14, 2025
Malicious code in jacket-ocean-wds111-project (npm)
- Aug 14, 2025
Malicious code in jacket-hill-lrm508-project (npm)
- Aug 14, 2025
Malicious code in jacket-hedgehog-aut206-project (npm)
- Aug 14, 2025
Malicious code in jacket-brook-cim504-project (npm)
- Aug 14, 2025
Malicious code in jacket-arctic-dwo959-project (npm)
- Aug 14, 2025
Malicious code in jaccia (npm)
- Aug 14, 2025
Malicious code in jabbah-subduction-got-duplex (npm)
- Aug 14, 2025
Malicious code in jabbah-graviton-on-areology (npm)
- Aug 14, 2025
Malicious code in jabbah-futurology-sedna-augmentedreality (npm)
- Aug 14, 2025
Malicious code in jabbah-eridanus-jupiter-hugo (npm)
- Aug 14, 2025
Malicious code in jabbah-chakra-ui-pino-chromedriver (npm)
- Aug 14, 2025
Malicious code in jabbah-bootes-nebula-seismology (npm)
- Aug 14, 2025
Malicious code in j3-sha3 (npm)
- Aug 14, 2025
Malicious code in j2-cli (npm)
- Aug 14, 2025
Malicious code in iztlaiptv (npm)
- Aug 14, 2025
Malicious code in izberg-backoffice-inventory-js (npm)
- Aug 14, 2025
Malicious code in izar-bellatrix-accretion-photon (npm)
- Aug 14, 2025
Malicious code in ixordocs-portal-gui (npm)
- Aug 14, 2025
Malicious code in ixmixdrix (npm)
- Aug 14, 2025
Malicious code in ixmcqkwnbvglrpes (npm)
- Aug 14, 2025
Malicious code in ixacalc (npm)
- Aug 14, 2025
Malicious code in iwwa-front (npm)
- Aug 14, 2025
Malicious code in iwsprxkcnhgbyatk (npm)
- Aug 14, 2025
Malicious code in iwenrvfsdjhckkuo (npm)
- Aug 14, 2025
Malicious code in iwasm-ion-schema (npm)
- Aug 14, 2025
Malicious code in iwan-tahu72-breki (npm)
- Aug 14, 2025
Malicious code in iwan-soto44-kuki (npm)
- Aug 14, 2025
Malicious code in iwan-lapis67-breki (npm)
- Aug 14, 2025
Malicious code in iwan-buburayam68-sukiwir (npm)
- Aug 14, 2025
Malicious code in ivyplug (npm)
- Aug 14, 2025
Malicious code in ivyedge (npm)
- Aug 14, 2025
Malicious code in ivycrm (npm)
- Aug 14, 2025
Malicious code in ivy_ogoro_8cq5s_glacier (npm)
- Aug 14, 2025
Malicious code in ivy_msxbq_uy1fu_willow (npm)
Page 5983 of 7,326