Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malicious code in evycfpkhwsoqljrg (npm)
- Jul 11, 2022
Malware in evycfpkhwsoqljrg
1 compromised version
- Jul 11, 2022
Malware in ewixaqlkksouyvhd
1 compromised version
- Jul 11, 2022
Malicious code in favoygjtrhxednsb (npm)
- Jul 11, 2022
Malicious code in ezdklvixgmnfjphu (npm)
- Jul 11, 2022
Malware in favoygjtrhxednsb
1 compromised version
- Jul 11, 2022
Malware in ezdklvixgmnfjphu
1 compromised version
- Jul 11, 2022
Malicious code in fbkxusdacnlzgyir (npm)
- Jul 11, 2022
Malware in fbkxusdacnlzgyir
1 compromised version
- Jul 11, 2022
Malicious code in fdltbkpahimjsyvc (npm)
- Jul 11, 2022
Malicious code in fbpivxmrgctnkluy (npm)
- Jul 11, 2022
Malware in fdltbkpahimjsyvc
1 compromised version
- Jul 11, 2022
Malware in fbpivxmrgctnkluy
1 compromised version
- Jul 11, 2022
Malicious code in fgmkvwqxdyhbekor (npm)
- Jul 11, 2022
Malicious code in fgjltycbvumazrdp (npm)
- Jul 11, 2022
Malware in fgmkvwqxdyhbekor
1 compromised version
- Jul 11, 2022
Malware in fgjltycbvumazrdp
1 compromised version
- Jul 11, 2022
Malicious code in flyqtkrewmbiuhov (npm)
- Jul 11, 2022
Malicious code in fikwnsgtoumjleqx (npm)
- Jul 11, 2022
Malicious code in fiapgcxeqyotukhz (npm)
- Jul 11, 2022
Malware in flyqtkrewmbiuhov
1 compromised version
- Jul 11, 2022
Malware in fikwnsgtoumjleqx
1 compromised version
- Jul 11, 2022
Malware in fiapgcxeqyotukhz
1 compromised version
- Jul 11, 2022
Malicious code in fplgycikouxtwzvk (npm)
- Jul 11, 2022
Malware in fplgycikouxtwzvk
1 compromised version
- Jul 11, 2022
Malicious code in fqapvwmguoyiktxd (npm)
- Jul 11, 2022
Malware in fqapvwmguoyiktxd
1 compromised version
- Jul 11, 2022
Malicious code in fqxsbvwkgdykaetc (npm)
- Jul 11, 2022
Malware in fqxsbvwkgdykaetc
1 compromised version
- Jul 11, 2022
Malicious code in fqtukaxmoibscnjd (npm)
- Jul 11, 2022
Malware in fqtukaxmoibscnjd
1 compromised version
- Jul 11, 2022
Malicious code in fzsknvyeqakgmuip (npm)
- Jul 11, 2022
Malicious code in fxukeowjtcvakhdi (npm)
- Jul 11, 2022
Malicious code in fxowgnrmtuzeikbl (npm)
- Jul 11, 2022
Malware in fzsknvyeqakgmuip
1 compromised version
- Jul 11, 2022
Malware in fxowgnrmtuzeikbl
1 compromised version
- Jul 11, 2022
Malware in fxukeowjtcvakhdi
1 compromised version
- Jul 11, 2022
Malicious code in gvckofeyuxstdjhb (npm)
- Jul 11, 2022
Malware in gvckofeyuxstdjhb
1 compromised version
- Jul 11, 2022
Malicious code in hgkuxjmndplekiwb (npm)
- Jul 11, 2022
Malware in hgkuxjmndplekiwb
1 compromised version
- Jul 11, 2022
Malicious code in gvskwiczjxplfkqd (npm)
- Jul 11, 2022
Malware in gvskwiczjxplfkqd
1 compromised version
- Jul 11, 2022
Malicious code in hbwxaspkdljouvgz (npm)
- Jul 11, 2022
Malware in hbwxaspkdljouvgz
1 compromised version
- Jul 11, 2022
Malicious code in hcgdjsfkxltvyzmi (npm)
- Jul 11, 2022
Malware in hcgdjsfkxltvyzmi
1 compromised version
- Jul 11, 2022
Malicious code in hgxfbutkqovdzwpa (npm)
- Jul 11, 2022
Malware in hgxfbutkqovdzwpa
1 compromised version
- Jul 11, 2022
Malicious code in heluzmpisoqrjbkd (npm)
Page 4866 of 5,078