Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in isvyfkbxhnjmzakg
1 compromised version
- Jul 11, 2022
Malicious code in ipxksnruvewdzbgm (npm)
- Jul 11, 2022
Malware in ipxksnruvewdzbgm
1 compromised version
- Jul 11, 2022
Malicious code in iqlomfvagyepxjks (npm)
- Jul 11, 2022
Malicious code in ipflgakorvnytcmz (npm)
- Jul 11, 2022
Malware in iqlomfvagyepxjks
1 compromised version
- Jul 11, 2022
Malware in ipflgakorvnytcmz
1 compromised version
- Jul 11, 2022
Malicious code in izhvuecdkrowmyat (npm)
- Jul 11, 2022
Malware in izhvuecdkrowmyat
1 compromised version
- Jul 11, 2022
Malicious code in imqpkrguwxctshbz (npm)
- Jul 11, 2022
Malware in imqpkrguwxctshbz
1 compromised version
- Jul 11, 2022
Malicious code in mcqnyxijgtedrbfz (npm)
- Jul 11, 2022
Malware in mcqnyxijgtedrbfz
1 compromised version
- Jul 11, 2022
Malicious code in mbtjopkefcugxhrk (npm)
- Jul 11, 2022
Malware in mbtjopkefcugxhrk
1 compromised version
- Jul 11, 2022
Malicious code in kscoxealkrnbywjd (npm)
- Jul 11, 2022
Malicious code in kpsbwogicxvtfqur (npm)
- Jul 11, 2022
Malware in kscoxealkrnbywjd
1 compromised version
- Jul 11, 2022
Malware in kpsbwogicxvtfqur
1 compromised version
- Jul 11, 2022
Malicious code in kpabiqmynvxezwcr (npm)
- Jul 11, 2022
Malware in kpabiqmynvxezwcr
1 compromised version
- Jul 11, 2022
Malicious code in kswazcvhukygtfjd (npm)
- Jul 11, 2022
Malware in kswazcvhukygtfjd
1 compromised version
- Jul 11, 2022
Malicious code in kwoucxdemjhifklg (npm)
- Jul 11, 2022
Malicious code in kpqrynfjhmukowct (npm)
- Jul 11, 2022
Malware in kwoucxdemjhifklg
1 compromised version
- Jul 11, 2022
Malware in kpqrynfjhmukowct
1 compromised version
- Jul 11, 2022
Malicious code in krmlpgntjfvesahi (npm)
- Jul 11, 2022
Malware in krmlpgntjfvesahi
1 compromised version
- Jul 11, 2022
Malicious code in kspmycbjraevliwn (npm)
- Jul 11, 2022
Malware in kspmycbjraevliwn
1 compromised version
- Jul 11, 2022
Malicious code in ksfkyvnlzejibumq (npm)
- Jul 11, 2022
Malware in ksfkyvnlzejibumq
1 compromised version
- Jul 11, 2022
Malicious code in kslwiaxnkdfyqvpm (npm)
- Jul 11, 2022
Malicious code in krgwhdbniscqjptu (npm)
- Jul 11, 2022
Malware in krgwhdbniscqjptu
1 compromised version
- Jul 11, 2022
Malware in kslwiaxnkdfyqvpm
1 compromised version
- Jul 11, 2022
Malicious code in htqsoapimkbjnvlk (npm)
- Jul 11, 2022
Malicious code in hgvrmwikcsnptaxq (npm)
- Jul 11, 2022
Malware in hgvrmwikcsnptaxq
1 compromised version
- Jul 11, 2022
Malware in htqsoapimkbjnvlk
1 compromised version
- Jul 11, 2022
Malicious code in bsoldncqaiwkxftk (npm)
- Jul 11, 2022
Malware in bsoldncqaiwkxftk
1 compromised version
- Jul 11, 2022
Malicious code in buoghkesdwknqayt (npm)
- Jul 11, 2022
Malware in buoghkesdwknqayt
1 compromised version
- Jul 11, 2022
Malicious code in cgdunrhmoljqytib (npm)
- Jul 11, 2022
Malicious code in cdlgvwzbxomurati (npm)
- Jul 11, 2022
Malicious code in cakwgoydmhvlnits (npm)
- Jul 11, 2022
Malware in cgdunrhmoljqytib
1 compromised version
- Jul 11, 2022
Malware in cakwgoydmhvlnits
1 compromised version
Page 4862 of 5,078