Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in lzjeoqbcmfigadny
1 compromised version
- Jul 11, 2022
Malicious code in mflxtioqpeahbkzk (npm)
- Jul 11, 2022
Malware in mflxtioqpeahbkzk
1 compromised version
- Jul 11, 2022
Malicious code in msdqlkkuajnbihez (npm)
- Jul 11, 2022
Malicious code in msbaqkhuzxgjprfn (npm)
- Jul 11, 2022
Malware in msdqlkkuajnbihez
1 compromised version
- Jul 11, 2022
Malware in msbaqkhuzxgjprfn
1 compromised version
- Jul 11, 2022
Malicious code in nxyumfgktakjqzlw (npm)
- Jul 11, 2022
Malware in nxyumfgktakjqzlw
1 compromised version
- Jul 11, 2022
Malicious code in mxfbjcytisrkuzva (npm)
- Jul 11, 2022
Malware in mxfbjcytisrkuzva
1 compromised version
- Jul 11, 2022
Malicious code in rconufmwksaqdgze (npm)
- Jul 11, 2022
Malicious code in qdzkykcwfrmasjbi (npm)
- Jul 11, 2022
Malicious code in qdobjtihkplyzuwf (npm)
- Jul 11, 2022
Malware in rconufmwksaqdgze
1 compromised version
- Jul 11, 2022
Malware in qdobjtihkplyzuwf
1 compromised version
- Jul 11, 2022
Malware in qdzkykcwfrmasjbi
1 compromised version
- Jul 11, 2022
Malicious code in rexivynfjbdlpakm (npm)
- Jul 11, 2022
Malware in rexivynfjbdlpakm
1 compromised version
- Jul 11, 2022
Malicious code in rdjwbzasfgvktock (npm)
- Jul 11, 2022
Malware in rdjwbzasfgvktock
1 compromised version
- Jul 11, 2022
Malicious code in rflktvuezgnypchw (npm)
- Jul 11, 2022
Malware in rflktvuezgnypchw
1 compromised version
- Jul 11, 2022
Malicious code in ronbhdcvpqkxwgei (npm)
- Jul 11, 2022
Malware in ronbhdcvpqkxwgei
1 compromised version
- Jul 11, 2022
Malicious code in rtmcdijhqgnakfpx (npm)
- Jul 11, 2022
Malicious code in rskovkpznxiydjmu (npm)
- Jul 11, 2022
Malicious code in rqndoxabkthupgik (npm)
- Jul 11, 2022
Malware in rtmcdijhqgnakfpx
1 compromised version
- Jul 11, 2022
Malware in rskovkpznxiydjmu
1 compromised version
- Jul 11, 2022
Malware in rqndoxabkthupgik
1 compromised version
- Jul 11, 2022
Malicious code in ryjqvlxozpdcubta (npm)
- Jul 11, 2022
Malicious code in rydlmepkticszjqo (npm)
- Jul 11, 2022
Malware in ryjqvlxozpdcubta
1 compromised version
- Jul 11, 2022
Malware in rydlmepkticszjqo
1 compromised version
- Jul 11, 2022
Malicious code in rysoupkizflktagx (npm)
- Jul 11, 2022
Malicious code in rysewnplkutazmfc (npm)
- Jul 11, 2022
Malware in rysoupkizflktagx
1 compromised version
- Jul 11, 2022
Malware in rysewnplkutazmfc
1 compromised version
- Jul 11, 2022
Malicious code in sfwkgonjlmtkzhqr (npm)
- Jul 11, 2022
Malware in sfwkgonjlmtkzhqr
1 compromised version
- Jul 11, 2022
Malicious code in seligjvmcxbytpuk (npm)
- Jul 11, 2022
Malicious code in sbihamxfcvljoktr (npm)
- Jul 11, 2022
Malicious code in rzytvgwicqnkkjsd (npm)
- Jul 11, 2022
Malware in sbihamxfcvljoktr
1 compromised version
- Jul 11, 2022
Malware in seligjvmcxbytpuk
1 compromised version
- Jul 11, 2022
Malware in rzytvgwicqnkkjsd
1 compromised version
- Jul 11, 2022
Malicious code in sfexajcomdqnlykw (npm)
- Jul 11, 2022
Malware in sfexajcomdqnlykw
1 compromised version
- Jul 11, 2022
Malicious code in szdmqjvwltoxeyic (npm)
Page 4868 of 5,078