Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- MAL-2024-2581Malwarenpmkimetsu-no-yaiba-to-the-swordsmith-village-2023-full-mp4720p-1080p-hd-4k-english-subJun 25, 2024
Malicious code in kimetsu-no-yaiba-to-the-swordsmith-village-2023-full-mp4720p-1080p-hd-4k-english-sub (npm)
1 compromised version
- Jun 25, 2024
Malicious code in kibana-github-actions (npm)
1 compromised version
- Jun 25, 2024
Malicious code in kendo-react-messages (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in katha-venuka-katha-hindi-movie (npm)
1 compromised version
- Jun 25, 2024
Malicious code in karma-console-reporter (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jwt-angular11-client (npm)
1 compromised version
- Jun 25, 2024
Malicious code in justgiving (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jsnewspaper (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in jrmisa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jrmis (npm)
11 compromised versions
- Jun 25, 2024
Malicious code in jqueryoffline (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jquerydownloadnew (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jquery-validation-utils (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in jquery-ui-custom (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jquery-impromtu (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jquery-easing-original (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jquery-dragster (npm)
7 compromised versions
- Jun 25, 2024
Malicious code in jqplot-custom (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jordan-amir (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-kapitel-4-ganzer-film-auf-deutsch (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-chapter-4-movie-online-free-movies (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-chapter-4-full-movies-online-at-homes-hq (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in john-wick-chapter-4-full-movies-online-at-home-today (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-chapter-4-2023-streaming-online-on-123movies (npm)
1 compromised version
- MAL-2024-2557Malwarenpmjohn-wick-capitulo-4-pelicula-completa-en-linea-descarga-gratuita-en-123moviesJun 25, 2024
Malicious code in john-wick-capitulo-4-pelicula-completa-en-linea-descarga-gratuita-en-123movies (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-4-pelicula-comple-ta-online-es-espanol-latino-gratis247 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish-variendo-18 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish--marzo-27-30 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish--march-28 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish--march-27 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-4-2023-la-mejor-neova-pelicula-4-k--en-casa-en-lienia-love (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-4-2023-la-mejor-neova-pelicula-4-k--en-casa-en-lienia-lliena-love (npm)
1 compromised version
- Jun 25, 2024
Malicious code in john-wick-4-2023-la-mejor-neova-pelicula-4-k--en-casa-en-lienia (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jhoothi-main-makkaar (npm)
1 compromised version
- MAL-2024-2547MalwarenpmjhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrxasdadadasdasdadasdasdasdasdtestJun 25, 2024
Malicious code in jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrxasdadadasdasdadasdasdasdasdtest (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrxasdadadasdasdadasdasdasdasd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrxasdadadasdasd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrx (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jewel-case (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in jetpack-custom-fonts (npm)
1 compromised version
- Jun 25, 2024
Malicious code in jai-surya-varman78 (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in j6-test (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in j4-test (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in j-o-h-n-wick-4-pelicula-completa-en-espanol-latino-6-k (npm)
1 compromised version
- Jun 25, 2024
Malicious code in item-shop-data-client (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in istanbul_test (npm)
1 compromised version
- Jun 25, 2024
Malicious code in isp-orion-theme (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ions-package (npm)
1 compromised version
- Jun 25, 2024
Malicious code in internalpackage-ncctest (npm)
1 compromised version
- Jun 25, 2024
Malicious code in internal-logger (npm)
3 compromised versions
Page 6704 of 7,293