Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in jhyzkumqikexvcop
1 compromised version
- Jul 11, 2022
Malicious code in uibrqzjpknsdvyfw (npm)
- Jul 11, 2022
Malware in uibrqzjpknsdvyfw
1 compromised version
- Jul 11, 2022
Malicious code in hvskzgtdmjqaoukx (npm)
- Jul 11, 2022
Malware in hvskzgtdmjqaoukx
1 compromised version
- Jul 11, 2022
Malicious code in glqokkcbpdirtxme (npm)
- Jul 11, 2022
Malware in glqokkcbpdirtxme
1 compromised version
- Jul 11, 2022
Malicious code in ohwczbeuslaxvpmd (npm)
- Jul 11, 2022
Malicious code in lxqrwcnvsgkbjfuo (npm)
- Jul 11, 2022
Malicious code in kaojezutnfyrgkwv (npm)
- Jul 11, 2022
Malware in lxqrwcnvsgkbjfuo
1 compromised version
- Jul 11, 2022
Malware in ohwczbeuslaxvpmd
1 compromised version
- Jul 11, 2022
Malware in kaojezutnfyrgkwv
1 compromised version
- Jul 11, 2022
Malicious code in loaypexrnbszqvjh (npm)
- Jul 11, 2022
Malware in loaypexrnbszqvjh
1 compromised version
- Jul 11, 2022
Malicious code in nkurkbscyphxzawt (npm)
- Jul 11, 2022
Malware in nkurkbscyphxzawt
1 compromised version
- Jul 11, 2022
Malicious code in oktcpwyrzkhdsgnx (npm)
- Jul 11, 2022
Malware in oktcpwyrzkhdsgnx
1 compromised version
- Jul 11, 2022
Malicious code in cnvofxjbmikwrlkh (npm)
- Jul 11, 2022
Malware in cnvofxjbmikwrlkh
1 compromised version
- Jul 11, 2022
Malicious code in otcpndfkwijlhesu (npm)
- Jul 11, 2022
Malicious code in eykqsbrzawtghvui (npm)
- Jul 11, 2022
Malware in eykqsbrzawtghvui
1 compromised version
- Jul 11, 2022
Malware in otcpndfkwijlhesu
1 compromised version
- Jul 11, 2022
Malicious code in zmodfqbpcyijkten (npm)
- Jul 11, 2022
Malicious code in tkogyxdcurwhfain (npm)
- Jul 11, 2022
Malware in zmodfqbpcyijkten
1 compromised version
- Jul 11, 2022
Malware in tkogyxdcurwhfain
1 compromised version
- Jul 11, 2022
Malicious code in gvcpxzyaohifketl (npm)
- Jul 11, 2022
Malware in gvcpxzyaohifketl
1 compromised version
- Jul 11, 2022
Malicious code in qkwyeczvxstmabjn (npm)
- Jul 11, 2022
Malware in qkwyeczvxstmabjn
1 compromised version
- Jul 11, 2022
Malicious code in zevkstacmkonlfdu (npm)
- Jul 11, 2022
Malware in zevkstacmkonlfdu
1 compromised version
- Jul 11, 2022
Malicious code in jszxcgeobiqvnhlm (npm)
- Jul 11, 2022
Malware in jszxcgeobiqvnhlm
1 compromised version
- Jul 11, 2022
Malicious code in ylropkmdjbvxiekt (npm)
- Jul 11, 2022
Malware in ylropkmdjbvxiekt
1 compromised version
- Jul 11, 2022
Malicious code in uigkvhamsfcyobxt (npm)
- Jul 11, 2022
Malware in uigkvhamsfcyobxt
1 compromised version
- Jul 11, 2022
Malicious code in etnhjzgmfwbocvqp (npm)
- Jul 11, 2022
Malware in etnhjzgmfwbocvqp
1 compromised version
- Jul 11, 2022
Malicious code in lokbpemghcrquyjz (npm)
- Jul 11, 2022
Malware in lokbpemghcrquyjz
1 compromised version
- Jul 11, 2022
Malicious code in syondbqvefzahmcl (npm)
- Jul 11, 2022
Malicious code in kbgfvtxykesdiojq (npm)
- Jul 11, 2022
Malware in syondbqvefzahmcl
1 compromised version
- Jul 11, 2022
Malware in kbgfvtxykesdiojq
1 compromised version
- Jul 11, 2022
Malicious code in kguwtvbsphcozale (npm)
Page 4857 of 5,078