Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in nofyxtwcmpqrikae
1 compromised version
- Jul 11, 2022
Malicious code in nucokwmkflsgprhx (npm)
- Jul 11, 2022
Malware in nucokwmkflsgprhx
1 compromised version
- Jul 11, 2022
Malicious code in omkzeqrnuftlwchi (npm)
- Jul 11, 2022
Malicious code in omfbrekuakwqlhxc (npm)
- Jul 11, 2022
Malicious code in oludrxctfbjapemk (npm)
- Jul 11, 2022
Malware in omfbrekuakwqlhxc
1 compromised version
- Jul 11, 2022
Malware in oludrxctfbjapemk
1 compromised version
- Jul 11, 2022
Malware in omkzeqrnuftlwchi
1 compromised version
- Jul 11, 2022
Malicious code in olbizfdwpskrxcen (npm)
- Jul 11, 2022
Malware in olbizfdwpskrxcen
1 compromised version
- Jul 11, 2022
Malicious code in olrfdwpetayuknqb (npm)
- Jul 11, 2022
Malware in olrfdwpetayuknqb
1 compromised version
- Jul 11, 2022
Malicious code in otbknqvxekadjwgs (npm)
- Jul 11, 2022
Malware in otbknqvxekadjwgs
1 compromised version
- Jul 11, 2022
Malicious code in onmhfzteqydkxlrw (npm)
- Jul 11, 2022
Malware in onmhfzteqydkxlrw
1 compromised version
- Jul 11, 2022
Malicious code in ovtdwahzsrjunxei (npm)
- Jul 11, 2022
Malicious code in otcvgxykufdlnjqm (npm)
- Jul 11, 2022
Malware in otcvgxykufdlnjqm
1 compromised version
- Jul 11, 2022
Malware in ovtdwahzsrjunxei
1 compromised version
- Jul 11, 2022
Malicious code in ovrthqdyfpmnksel (npm)
- Jul 11, 2022
Malicious code in osbynpeglvtwqumx (npm)
- Jul 11, 2022
Malicious code in oqsagcjwylizkkeu (npm)
- Jul 11, 2022
Malware in ovrthqdyfpmnksel
1 compromised version
- Jul 11, 2022
Malware in osbynpeglvtwqumx
1 compromised version
- Jul 11, 2022
Malware in oqsagcjwylizkkeu
1 compromised version
- Jul 11, 2022
Malicious code in ofihekndlpwvgktq (npm)
- Jul 11, 2022
Malware in ofihekndlpwvgktq
1 compromised version
- Jul 11, 2022
Malicious code in ofblhekwgqynjxvp (npm)
- Jul 11, 2022
Malware in ofblhekwgqynjxvp
1 compromised version
- Jul 11, 2022
Malicious code in pdubonfqxjrwemvh (npm)
- Jul 11, 2022
Malware in pdubonfqxjrwemvh
1 compromised version
- Jul 11, 2022
Malicious code in ojbznypdfmaiusgv (npm)
- Jul 11, 2022
Malicious code in ojasfwzhplyrknik (npm)
- Jul 11, 2022
Malware in ojbznypdfmaiusgv
1 compromised version
- Jul 11, 2022
Malware in ojasfwzhplyrknik
1 compromised version
- Jul 11, 2022
Malicious code in ojqmdtzpguxshkeb (npm)
- Jul 11, 2022
Malicious code in oevmkgzfqskahcwb (npm)
- Jul 11, 2022
Malware in oevmkgzfqskahcwb
1 compromised version
- Jul 11, 2022
Malware in ojqmdtzpguxshkeb
1 compromised version
- Jul 11, 2022
Malicious code in obeuwjnkzpfrqmhs (npm)
- Jul 11, 2022
Malware in obeuwjnkzpfrqmhs
1 compromised version
- Jul 11, 2022
Malicious code in pgovlicdntbzhskr (npm)
- Jul 11, 2022
Malware in pgovlicdntbzhskr
1 compromised version
- Jul 11, 2022
Malicious code in phceosgzqlrmbxdk (npm)
- Jul 11, 2022
Malicious code in pguzvbahliyfwejk (npm)
- Jul 11, 2022
Malicious code in pgrcizmyxjbefkut (npm)
- Jul 11, 2022
Malware in pgrcizmyxjbefkut
1 compromised version
- Jul 11, 2022
Malware in phceosgzqlrmbxdk
1 compromised version
Page 4859 of 5,078