Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in cqbwogthvkuenakr
1 compromised version
- Jul 11, 2022
Malicious code in koczbjsvdleayurn (npm)
- Jul 11, 2022
Malware in koczbjsvdleayurn
1 compromised version
- Jul 11, 2022
Malicious code in koxfugjbrecnltsi (npm)
- Jul 11, 2022
Malicious code in jmesacrxunzwbyhl (npm)
- Jul 11, 2022
Malware in jmesacrxunzwbyhl
1 compromised version
- Jul 11, 2022
Malware in koxfugjbrecnltsi
1 compromised version
- Jul 11, 2022
Malicious code in lzqxodjrkbwhyuvf (npm)
- Jul 11, 2022
Malware in lzqxodjrkbwhyuvf
1 compromised version
- Jul 11, 2022
Malicious code in mafxwtkkojsyznei (npm)
- Jul 11, 2022
Malware in mafxwtkkojsyznei
1 compromised version
- Jul 11, 2022
Malicious code in nlzvbcyqseakmxoi (npm)
- Jul 11, 2022
Malicious code in msickkxpbuvalqrz (npm)
- Jul 11, 2022
Malicious code in mrvpdiuacjoweflq (npm)
- Jul 11, 2022
Malware in msickkxpbuvalqrz
1 compromised version
- Jul 11, 2022
Malware in nlzvbcyqseakmxoi
1 compromised version
- Jul 11, 2022
Malware in mrvpdiuacjoweflq
1 compromised version
- Jul 11, 2022
Malicious code in qczwaksngjpbehxt (npm)
- Jul 11, 2022
Malware in qczwaksngjpbehxt
1 compromised version
- Jul 11, 2022
Malicious code in nmbjqeshkdxzvoup (npm)
- Jul 11, 2022
Malware in nmbjqeshkdxzvoup
1 compromised version
- Jul 11, 2022
Malicious code in rfqdgvcjnaeuwzxs (npm)
- Jul 11, 2022
Malicious code in rdtkfuhjacoezmwn (npm)
- Jul 11, 2022
Malware in rfqdgvcjnaeuwzxs
1 compromised version
- Jul 11, 2022
Malware in rdtkfuhjacoezmwn
1 compromised version
- Jul 11, 2022
Malicious code in rvbxthpadlowmfji (npm)
- Jul 11, 2022
Malicious code in rlhjypbkxqmzwtak (npm)
- Jul 11, 2022
Malicious code in rkyinqawlpfdgbvc (npm)
- Jul 11, 2022
Malware in rkyinqawlpfdgbvc
1 compromised version
- Jul 11, 2022
Malware in rlhjypbkxqmzwtak
1 compromised version
- Jul 11, 2022
Malware in rvbxthpadlowmfji
1 compromised version
- Jul 11, 2022
Malicious code in rzltkhpoanubgimk (npm)
- Jul 11, 2022
Malicious code in ryxdemsinpwqzujo (npm)
- Jul 11, 2022
Malware in rzltkhpoanubgimk
1 compromised version
- Jul 11, 2022
Malware in ryxdemsinpwqzujo
1 compromised version
- Jul 11, 2022
Malicious code in rzwdkpokcixvuyet (npm)
- Jul 11, 2022
Malware in rzwdkpokcixvuyet
1 compromised version
- Jul 11, 2022
Malicious code in sainzpgwflumkdbc (npm)
- Jul 11, 2022
Malware in sainzpgwflumkdbc
1 compromised version
- Jul 11, 2022
Malicious code in sbtydhovriufmpqx (npm)
- Jul 11, 2022
Malware in sbtydhovriufmpqx
1 compromised version
- Jul 11, 2022
Malicious code in skviluygdeokwnrb (npm)
- Jul 11, 2022
Malware in skviluygdeokwnrb
1 compromised version
- Jul 11, 2022
Malicious code in szgkwdcqehtuiyjk (npm)
- Jul 11, 2022
Malicious code in shpygtobzrxjwldf (npm)
- Jul 11, 2022
Malware in szgkwdcqehtuiyjk
1 compromised version
- Jul 11, 2022
Malware in shpygtobzrxjwldf
1 compromised version
- Jul 11, 2022
Malicious code in ucdpnsikykeohvmb (npm)
- Jul 11, 2022
Malicious code in tkruafxisbjmogek (npm)
- Jul 11, 2022
Malware in tkruafxisbjmogek
1 compromised version
Page 4864 of 5,078