Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in heluzmpisoqrjbkd
1 compromised version
- Jul 11, 2022
Malicious code in hldqgyckmuwxjefs (npm)
- Jul 11, 2022
Malicious code in hkwyvlmxbjkzdarf (npm)
- Jul 11, 2022
Malware in hldqgyckmuwxjefs
1 compromised version
- Jul 11, 2022
Malware in hkwyvlmxbjkzdarf
1 compromised version
- Jul 11, 2022
Malicious code in hnkwfdvesrqbapzu (npm)
- Jul 11, 2022
Malware in hnkwfdvesrqbapzu
1 compromised version
- Jul 11, 2022
Malicious code in hpkeaxgjnldbuism (npm)
- Jul 11, 2022
Malware in hpkeaxgjnldbuism
1 compromised version
- Jul 11, 2022
Malicious code in hrdebjywvtkmcpga (npm)
- Jul 11, 2022
Malware in hrdebjywvtkmcpga
1 compromised version
- Jul 11, 2022
Malicious code in hqbgkkmrztyijnou (npm)
- Jul 11, 2022
Malware in hqbgkkmrztyijnou
1 compromised version
- Jul 11, 2022
Malicious code in ixtskfghuraoebwy (npm)
- Jul 11, 2022
Malicious code in ifapbuxwnmzrqyov (npm)
- Jul 11, 2022
Malicious code in hucodaimxvtrkeyl (npm)
- Jul 11, 2022
Malware in ifapbuxwnmzrqyov
1 compromised version
- Jul 11, 2022
Malware in ixtskfghuraoebwy
1 compromised version
- Jul 11, 2022
Malware in hucodaimxvtrkeyl
1 compromised version
- Jul 11, 2022
Malicious code in iztysrkjocvafqpb (npm)
- Jul 11, 2022
Malware in iztysrkjocvafqpb
1 compromised version
- Jul 11, 2022
Malicious code in jdvtfcumpwzaxgyr (npm)
- Jul 11, 2022
Malicious code in jckfwvyzmkdibnlo (npm)
- Jul 11, 2022
Malware in jdvtfcumpwzaxgyr
1 compromised version
- Jul 11, 2022
Malware in jckfwvyzmkdibnlo
1 compromised version
- Jul 11, 2022
Malicious code in kgfocqmbyvdsnhlw (npm)
- Jul 11, 2022
Malicious code in kflztgcydoprquhm (npm)
- Jul 11, 2022
Malicious code in kdswmlvbytpczrgn (npm)
- Jul 11, 2022
Malware in kflztgcydoprquhm
1 compromised version
- Jul 11, 2022
Malware in kgfocqmbyvdsnhlw
1 compromised version
- Jul 11, 2022
Malware in kdswmlvbytpczrgn
1 compromised version
- Jul 11, 2022
Malicious code in lmpcrfdnkyzehtja (npm)
- Jul 11, 2022
Malicious code in ligtpbhqmvnkofkz (npm)
- Jul 11, 2022
Malware in lmpcrfdnkyzehtja
1 compromised version
- Jul 11, 2022
Malware in ligtpbhqmvnkofkz
1 compromised version
- Jul 11, 2022
Malicious code in luhrfzvejsgcakmb (npm)
- Jul 11, 2022
Malicious code in lpjywdvkabfnczui (npm)
- Jul 11, 2022
Malicious code in lozyrnvqwesducxi (npm)
- Jul 11, 2022
Malware in luhrfzvejsgcakmb
1 compromised version
- Jul 11, 2022
Malware in lpjywdvkabfnczui
1 compromised version
- Jul 11, 2022
Malware in lozyrnvqwesducxi
1 compromised version
- Jul 11, 2022
Malicious code in lsdomtzngxpbjkea (npm)
- Jul 11, 2022
Malicious code in lqwdgtrfmkzeaohi (npm)
- Jul 11, 2022
Malware in lsdomtzngxpbjkea
1 compromised version
- Jul 11, 2022
Malware in lqwdgtrfmkzeaohi
1 compromised version
- Jul 11, 2022
Malicious code in lvcahgmwzkduejrt (npm)
- Jul 11, 2022
Malware in lvcahgmwzkduejrt
1 compromised version
- Jul 11, 2022
Malicious code in ltpmhgzfxqbkdive (npm)
- Jul 11, 2022
Malware in ltpmhgzfxqbkdive
1 compromised version
- Jul 11, 2022
Malicious code in lzjeoqbcmfigadny (npm)
Page 4867 of 5,078