Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in pguzvbahliyfwejk
1 compromised version
- Jul 11, 2022
Malicious code in pawnftubxjcsiklv (npm)
- Jul 11, 2022
Malicious code in patqykhxwrmnkuec (npm)
- Jul 11, 2022
Malware in patqykhxwrmnkuec
1 compromised version
- Jul 11, 2022
Malware in pawnftubxjcsiklv
1 compromised version
- Jul 11, 2022
Malicious code in pksrxkyftmbwuozn (npm)
- Jul 11, 2022
Malware in pksrxkyftmbwuozn
1 compromised version
- Jul 11, 2022
Malicious code in pagneokkbhqimzju (npm)
- Jul 11, 2022
Malware in pagneokkbhqimzju
1 compromised version
- Jul 11, 2022
Malicious code in pqnlgmtdifawekzu (npm)
- Jul 11, 2022
Malicious code in pkvqlrgfbyxehwka (npm)
- Jul 11, 2022
Malware in pkvqlrgfbyxehwka
1 compromised version
- Jul 11, 2022
Malware in pqnlgmtdifawekzu
1 compromised version
- Jul 11, 2022
Malicious code in polyxqkizwcbvjkm (npm)
- Jul 11, 2022
Malicious code in pofrtiuqdnbvzkwx (npm)
- Jul 11, 2022
Malware in pofrtiuqdnbvzkwx
1 compromised version
- Jul 11, 2022
Malware in polyxqkizwcbvjkm
1 compromised version
- Jul 11, 2022
Malicious code in pndjuobrqtvlasgz (npm)
- Jul 11, 2022
Malware in pndjuobrqtvlasgz
1 compromised version
- Jul 11, 2022
Malicious code in pndchbzqorulakxe (npm)
- Jul 11, 2022
Malware in pndchbzqorulakxe
1 compromised version
- Jul 11, 2022
Malicious code in plnreqzvyfbhkwxk (npm)
- Jul 11, 2022
Malicious code in plfkweujctyqhdzb (npm)
- Jul 11, 2022
Malware in plnreqzvyfbhkwxk
1 compromised version
- Jul 11, 2022
Malware in plfkweujctyqhdzb
1 compromised version
- Jul 11, 2022
Malicious code in pmohswjydfextqai (npm)
- Jul 11, 2022
Malware in pmohswjydfextqai
1 compromised version
- Jul 11, 2022
Malicious code in jsqaboglpwciumvz (npm)
- Jul 11, 2022
Malware in jsqaboglpwciumvz
1 compromised version
- Jul 11, 2022
Malicious code in pntovlwumqkzryai (npm)
- Jul 11, 2022
Malware in pntovlwumqkzryai
1 compromised version
- Jul 11, 2022
Malicious code in ptowankmgrdxcbzj (npm)
- Jul 11, 2022
Malware in ptowankmgrdxcbzj
1 compromised version
- Jul 11, 2022
Malicious code in lcrfjkhmieyoxwaq (npm)
- Jul 11, 2022
Malware in lcrfjkhmieyoxwaq
1 compromised version
- Jul 11, 2022
Malicious code in lcvaedgqzyujtxkb (npm)
- Jul 11, 2022
Malware in lcvaedgqzyujtxkb
1 compromised version
- Jul 11, 2022
Malicious code in kasiklgeyhbvfrzu (npm)
- Jul 11, 2022
Malware in kasiklgeyhbvfrzu
1 compromised version
- Jul 11, 2022
Malicious code in kaufwgekdbotrcip (npm)
- Jul 11, 2022
Malware in kaufwgekdbotrcip
1 compromised version
- Jul 11, 2022
Malicious code in kaymsdxjpukotvhr (npm)
- Jul 11, 2022
Malware in kaymsdxjpukotvhr
1 compromised version
- Jul 11, 2022
Malicious code in kaqfvuxzhjmsecoy (npm)
- Jul 11, 2022
Malware in kaqfvuxzhjmsecoy
1 compromised version
- Jul 11, 2022
Malicious code in kcioagjbldwfqrkx (npm)
- Jul 11, 2022
Malware in kcioagjbldwfqrkx
1 compromised version
- Jul 11, 2022
Malicious code in kcupgbynzelovifq (npm)
- Jul 11, 2022
Malware in kcupgbynzelovifq
1 compromised version
- Jul 11, 2022
Malicious code in kejukosqlprdgfct (npm)
Page 4860 of 5,078