Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in lmigzpkowdysbqaj
1 compromised version
- Jul 11, 2022
Malicious code in hksnzojebplygmqi (npm)
- Jul 11, 2022
Malware in hksnzojebplygmqi
1 compromised version
- Jul 11, 2022
Malicious code in deszrqvutnbagkwx (npm)
- Jul 11, 2022
Malware in deszrqvutnbagkwx
1 compromised version
- Jul 11, 2022
Malicious code in osmwedfvhtpgxzaj (npm)
- Jul 11, 2022
Malware in osmwedfvhtpgxzaj
1 compromised version
- Jul 11, 2022
Malicious code in pjcklmzfgodawxui (npm)
- Jul 11, 2022
Malware in pjcklmzfgodawxui
1 compromised version
- Jul 11, 2022
Malicious code in kbsulxijmogvdrzp (npm)
- Jul 11, 2022
Malicious code in belzqadykjcpmwsk (npm)
- Jul 11, 2022
Malware in kbsulxijmogvdrzp
1 compromised version
- Jul 11, 2022
Malware in belzqadykjcpmwsk
1 compromised version
- Jul 11, 2022
Malicious code in wmcupyljiokxzrfb (npm)
- Jul 11, 2022
Malicious code in jxgzmtoedfscriyk (npm)
- Jul 11, 2022
Malware in wmcupyljiokxzrfb
1 compromised version
- Jul 11, 2022
Malware in jxgzmtoedfscriyk
1 compromised version
- Jul 11, 2022
Malicious code in ihjnkgdprfvkzeqa (npm)
- Jul 11, 2022
Malicious code in ifpjhdvkstkubzwn (npm)
- Jul 11, 2022
Malware in ifpjhdvkstkubzwn
1 compromised version
- Jul 11, 2022
Malware in ihjnkgdprfvkzeqa
1 compromised version
- Jul 11, 2022
Malicious code in bwpvkhlxkgfcrdet (npm)
- Jul 11, 2022
Malware in bwpvkhlxkgfcrdet
1 compromised version
- Jul 11, 2022
Malicious code in rvizdnhfjbmxkqeg (npm)
- Jul 11, 2022
Malware in rvizdnhfjbmxkqeg
1 compromised version
- Jul 11, 2022
Malicious code in ndvyptqifbaursxg (npm)
- Jul 11, 2022
Malware in ndvyptqifbaursxg
1 compromised version
- Jul 11, 2022
Malicious code in tackgqvipebdhxfy (npm)
- Jul 11, 2022
Malicious code in qdjoxcrmsvaynikk (npm)
- Jul 11, 2022
Malware in qdjoxcrmsvaynikk
1 compromised version
- Jul 11, 2022
Malware in tackgqvipebdhxfy
1 compromised version
- Jul 11, 2022
Malicious code in ihgyfqjvdnuwtkxk (npm)
- Jul 11, 2022
Malware in ihgyfqjvdnuwtkxk
1 compromised version
- Jul 11, 2022
Malicious code in wkhourqxpfankdmv (npm)
- Jul 11, 2022
Malware in wkhourqxpfankdmv
1 compromised version
- Jul 11, 2022
Malicious code in usakiedqpgbhyonj (npm)
- Jul 11, 2022
Malware in usakiedqpgbhyonj
1 compromised version
- Jul 11, 2022
Malicious code in gipbmfvaczkeodwl (npm)
- Jul 11, 2022
Malware in gipbmfvaczkeodwl
1 compromised version
- Jul 11, 2022
Malicious code in smfjcvkwqbigrpkt (npm)
- Jul 11, 2022
Malicious code in bcztpuiojndlhmvx (npm)
- Jul 11, 2022
Malicious code in bancmxqetuhvglwd (npm)
- Jul 11, 2022
Malware in bancmxqetuhvglwd
1 compromised version
- Jul 11, 2022
Malware in bcztpuiojndlhmvx
1 compromised version
- Jul 11, 2022
Malware in smfjcvkwqbigrpkt
1 compromised version
- Jul 11, 2022
Malicious code in abenoypgxdqlmkwk (npm)
- Jul 11, 2022
Malicious code in tsgohznadkjfcymr (npm)
- Jul 11, 2022
Malware in abenoypgxdqlmkwk
1 compromised version
- Jul 11, 2022
Malware in tsgohznadkjfcymr
1 compromised version
- Jul 11, 2022
Malicious code in jhyzkumqikexvcop (npm)
Page 4856 of 5,078