Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in kguwtvbsphcozale
1 compromised version
- Jul 11, 2022
Malicious code in zuyapvkdcmxoiwbl (npm)
- Jul 11, 2022
Malicious code in ekjqybpfudscivmx (npm)
- Jul 11, 2022
Malware in zuyapvkdcmxoiwbl
1 compromised version
- Jul 11, 2022
Malware in ekjqybpfudscivmx
1 compromised version
- Jul 11, 2022
Malicious code in kxtupghkymwldfic (npm)
- Jul 11, 2022
Malicious code in itcknheoyvjplbaf (npm)
- Jul 11, 2022
Malicious code in duckrymwhlpaneos (npm)
- Jul 11, 2022
Malware in duckrymwhlpaneos
1 compromised version
- Jul 11, 2022
Malware in itcknheoyvjplbaf
1 compromised version
- Jul 11, 2022
Malware in kxtupghkymwldfic
1 compromised version
- Jul 11, 2022
Malicious code in abujtyvrmnckiodq (npm)
- Jul 11, 2022
Malicious code in okqaelhmbfuwipvz (npm)
- Jul 11, 2022
Malware in okqaelhmbfuwipvz
1 compromised version
- Jul 11, 2022
Malware in abujtyvrmnckiodq
1 compromised version
- Jul 11, 2022
Malicious code in ancdmoklxitjwqbf (npm)
- Jul 11, 2022
Malicious code in amknztsceqwgblou (npm)
- Jul 11, 2022
Malicious code in apzyjlbqwvkehmgo (npm)
- Jul 11, 2022
Malware in apzyjlbqwvkehmgo
1 compromised version
- Jul 11, 2022
Malware in ancdmoklxitjwqbf
1 compromised version
- Jul 11, 2022
Malware in amknztsceqwgblou
1 compromised version
- Jul 11, 2022
Malicious code in aukwrklsfxntqjch (npm)
- Jul 11, 2022
Malware in aukwrklsfxntqjch
1 compromised version
- Jul 11, 2022
Malicious code in askervlfikguyzmn (npm)
- Jul 11, 2022
Malware in askervlfikguyzmn
1 compromised version
- Jul 11, 2022
Malicious code in nyekafkhovgtslpu (npm)
- Jul 11, 2022
Malicious code in dpwcazslgjnykmuo (npm)
- Jul 11, 2022
Malware in dpwcazslgjnykmuo
1 compromised version
- Jul 11, 2022
Malware in nyekafkhovgtslpu
1 compromised version
- Jul 11, 2022
Malicious code in atpvuqnlmberwkdg (npm)
- Jul 11, 2022
Malware in atpvuqnlmberwkdg
1 compromised version
- Jul 11, 2022
Malicious code in oabcipqvkhelzmrn (npm)
- Jul 11, 2022
Malware in oabcipqvkhelzmrn
1 compromised version
- Jul 11, 2022
Malicious code in nwpfgeaquxjlzrib (npm)
- Jul 11, 2022
Malware in nwpfgeaquxjlzrib
1 compromised version
- Jul 11, 2022
Malicious code in nxjvakeqbdrtwmgh (npm)
- Jul 11, 2022
Malicious code in nuyzqmvihbpkcdea (npm)
- Jul 11, 2022
Malicious code in ntczkvywafpuijdq (npm)
- Jul 11, 2022
Malware in ntczkvywafpuijdq
1 compromised version
- Jul 11, 2022
Malware in nxjvakeqbdrtwmgh
1 compromised version
- Jul 11, 2022
Malware in nuyzqmvihbpkcdea
1 compromised version
- Jul 11, 2022
Malicious code in nqbcksuatvlgpkfy (npm)
- Jul 11, 2022
Malicious code in npyuxklzmiohjdcg (npm)
- Jul 11, 2022
Malware in npyuxklzmiohjdcg
1 compromised version
- Jul 11, 2022
Malware in nqbcksuatvlgpkfy
1 compromised version
- Jul 11, 2022
Malicious code in nqizvyalgkfjtwmx (npm)
- Jul 11, 2022
Malware in nqizvyalgkfjtwmx
1 compromised version
- Jul 11, 2022
Malicious code in nqmgvefdscxarowk (npm)
- Jul 11, 2022
Malware in nqmgvefdscxarowk
1 compromised version
- Jul 11, 2022
Malicious code in nofyxtwcmpqrikae (npm)
Page 4858 of 5,078