Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in cdlgvwzbxomurati
1 compromised version
- Jul 11, 2022
Malicious code in cfltupdwygjikoam (npm)
- Jul 11, 2022
Malicious code in ansfmowzdhuyqpic (npm)
- Jul 11, 2022
Malware in cfltupdwygjikoam
1 compromised version
- Jul 11, 2022
Malware in ansfmowzdhuyqpic
1 compromised version
- Jul 11, 2022
Malicious code in cplsbjvkgfokedat (npm)
- Jul 11, 2022
Malicious code in ankseilqrxkymfdt (npm)
- Jul 11, 2022
Malware in cplsbjvkgfokedat
1 compromised version
- Jul 11, 2022
Malware in ankseilqrxkymfdt
1 compromised version
- Jul 11, 2022
Malicious code in bsyjkctivnzglmxd (npm)
- Jul 11, 2022
Malware in bsyjkctivnzglmxd
1 compromised version
- Jul 11, 2022
Malicious code in byrujmzenxpvfkgs (npm)
- Jul 11, 2022
Malware in byrujmzenxpvfkgs
1 compromised version
- Jul 11, 2022
Malicious code in bwpokydqiuagvjze (npm)
- Jul 11, 2022
Malicious code in bwfkiveomxlycszp (npm)
- Jul 11, 2022
Malware in bwpokydqiuagvjze
1 compromised version
- Jul 11, 2022
Malware in bwfkiveomxlycszp
1 compromised version
- Jul 11, 2022
Malicious code in gkvlwtoaufqdhknb (npm)
- Jul 11, 2022
Malicious code in byxctlvkeqhduiza (npm)
- Jul 11, 2022
Malware in byxctlvkeqhduiza
1 compromised version
- Jul 11, 2022
Malware in gkvlwtoaufqdhknb
1 compromised version
- Jul 11, 2022
Malicious code in gqoknfrlmbtukycj (npm)
- Jul 11, 2022
Malware in gqoknfrlmbtukycj
1 compromised version
- Jul 11, 2022
Malicious code in gqbijrfodwhstecm (npm)
- Jul 11, 2022
Malware in gqbijrfodwhstecm
1 compromised version
- Jul 11, 2022
Malicious code in gqbznvkoealrwfjm (npm)
- Jul 11, 2022
Malware in gqbznvkoealrwfjm
1 compromised version
- Jul 11, 2022
Malicious code in gqrlpfdznoyxetbv (npm)
- Jul 11, 2022
Malware in gqrlpfdznoyxetbv
1 compromised version
- Jul 11, 2022
Malicious code in gpfuhcrdwbnsztvy (npm)
- Jul 11, 2022
Malware in gpfuhcrdwbnsztvy
1 compromised version
- Jul 11, 2022
Malicious code in gfsthiajxvwbrqlo (npm)
- Jul 11, 2022
Malware in gfsthiajxvwbrqlo
1 compromised version
- Jul 11, 2022
Malicious code in jrwmsfqaodngibty (npm)
- Jul 11, 2022
Malware in jrwmsfqaodngibty
1 compromised version
- Jul 11, 2022
Malicious code in keoshtwyzpqdifkj (npm)
- Jul 11, 2022
Malware in keoshtwyzpqdifkj
1 compromised version
- Jul 11, 2022
Malicious code in keblgxqycvozrhsn (npm)
- Jul 11, 2022
Malware in keblgxqycvozrhsn
1 compromised version
- Jul 11, 2022
Malicious code in kbxwekjsztqgiycl (npm)
- Jul 11, 2022
Malicious code in kbxozjiervwstgyp (npm)
- Jul 11, 2022
Malware in kbxwekjsztqgiycl
1 compromised version
- Jul 11, 2022
Malware in kbxozjiervwstgyp
1 compromised version
- Jul 11, 2022
Malicious code in crgxpuhqnbijwvez (npm)
- Jul 11, 2022
Malware in crgxpuhqnbijwvez
1 compromised version
- Jul 11, 2022
Malicious code in crkhzsxyvimwtjbe (npm)
- Jul 11, 2022
Malware in crkhzsxyvimwtjbe
1 compromised version
- Jul 11, 2022
Malicious code in crkfjbkvwehmoitu (npm)
- Jul 11, 2022
Malware in crkfjbkvwehmoitu
1 compromised version
- Jul 11, 2022
Malicious code in cqbwogthvkuenakr (npm)
Page 4863 of 5,078