Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in kvxaghikpucnldso
1 compromised version
- Jul 11, 2022
Malware in lszjdvtfxkiekbga
1 compromised version
- Jul 11, 2022
Malware in qzcomabjsvtgrkyx
1 compromised version
- Jul 11, 2022
Malware in pflgydevkbxamquw
1 compromised version
- Jul 11, 2022
Malware in vgbewykauqtxfhmi
1 compromised version
- Jul 11, 2022
Malware in ljtmycbiqukesnhg
1 compromised version
- Jul 11, 2022
Malware in tikrzbhncwvlmfgu
1 compromised version
- Jul 11, 2022
Malware in hjtdfypiocxwelkb
1 compromised version
- Jul 11, 2022
Malware in diqcbaxzhtnsplfj
1 compromised version
- Jul 11, 2022
Malware in eokpshjadwucgytr
1 compromised version
- Jul 11, 2022
Malware in cthipjznlgrwqysa
1 compromised version
- Jul 11, 2022
Malware in ygckxjnkwbemqval
1 compromised version
- Jul 11, 2022
Malware in ixvgbjzhpnalscut
1 compromised version
- Jul 11, 2022
Malicious code in yplijosmvagwfcku (npm)
- Jul 11, 2022
Malware in yplijosmvagwfcku
1 compromised version
- Jul 11, 2022
Malicious code in qxnmwkualkprdbtj (npm)
- Jul 11, 2022
Malware in qxnmwkualkprdbtj
1 compromised version
- Jul 11, 2022
Malicious code in wkpbyuamcqjrkefd (npm)
- Jul 11, 2022
Malicious code in svgjquyfeinbxrpl (npm)
- Jul 11, 2022
Malicious code in hretokxbpwuilnck (npm)
- Jul 11, 2022
Malicious code in dykesimovtpafwxq (npm)
- Jul 11, 2022
Malware in wkpbyuamcqjrkefd
1 compromised version
- Jul 11, 2022
Malware in svgjquyfeinbxrpl
1 compromised version
- Jul 11, 2022
Malware in dykesimovtpafwxq
1 compromised version
- Jul 11, 2022
Malware in hretokxbpwuilnck
1 compromised version
- Jul 11, 2022
Malicious code in klomsfbeixcrwuhn (npm)
- Jul 11, 2022
Malware in klomsfbeixcrwuhn
1 compromised version
- Jul 11, 2022
Malicious code in akrniehzkyqvcwum (npm)
- Jul 11, 2022
Malicious code in ufhgxvwybjiltpzs (npm)
- Jul 11, 2022
Malicious code in siytlnkdhzkjfevo (npm)
- Jul 11, 2022
Malware in akrniehzkyqvcwum
1 compromised version
- Jul 11, 2022
Malware in siytlnkdhzkjfevo
1 compromised version
- Jul 11, 2022
Malware in ufhgxvwybjiltpzs
1 compromised version
- Jul 11, 2022
Malicious code in xowtslzpndvkfrgk (npm)
- Jul 11, 2022
Malware in xowtslzpndvkfrgk
1 compromised version
- Jul 11, 2022
Malicious code in jvgmepykdwfrqali (npm)
- Jul 11, 2022
Malware in jvgmepykdwfrqali
1 compromised version
- Jul 11, 2022
Malicious code in zagqckhvirtmwfun (npm)
- Jul 11, 2022
Malicious code in uqngboakhrfmwxvl (npm)
- Jul 11, 2022
Malware in zagqckhvirtmwfun
1 compromised version
- Jul 11, 2022
Malware in uqngboakhrfmwxvl
1 compromised version
- Jul 11, 2022
Malicious code in thepfxrikzwavydc (npm)
- Jul 11, 2022
Malware in thepfxrikzwavydc
1 compromised version
- Jul 11, 2022
Malicious code in akjpmzcxeynfikob (npm)
- Jul 11, 2022
Malware in akjpmzcxeynfikob
1 compromised version
- Jul 11, 2022
Malicious code in lmigzpkowdysbqaj (npm)
- Jul 11, 2022
Malicious code in enhrwjgykzukapmx (npm)
- Jul 11, 2022
Malicious code in dqhemznkyktfvlwi (npm)
- Jul 11, 2022
Malware in dqhemznkyktfvlwi
1 compromised version
- Jul 11, 2022
Malware in enhrwjgykzukapmx
1 compromised version
Page 4855 of 5,078