Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jul 11, 2022
Malware in szdmqjvwltoxeyic
1 compromised version
- Jul 11, 2022
Malicious code in srkfyzmjqvakndol (npm)
- Jul 11, 2022
Malware in srkfyzmjqvakndol
1 compromised version
- Jul 11, 2022
Malicious code in teqarbfmpuvcnkkg (npm)
- Jul 11, 2022
Malware in teqarbfmpuvcnkkg
1 compromised version
- Jul 11, 2022
Malicious code in tfaqvoszwxlupjde (npm)
- Jul 11, 2022
Malware in tfaqvoszwxlupjde
1 compromised version
- Jul 11, 2022
Malicious code in tgfvhxqmrdapikjb (npm)
- Jul 11, 2022
Malicious code in tfcrxbasjdoinzvg (npm)
- Jul 11, 2022
Malware in tfcrxbasjdoinzvg
1 compromised version
- Jul 11, 2022
Malware in tgfvhxqmrdapikjb
1 compromised version
- Jul 11, 2022
Malicious code in tkumerzqghjfpnbo (npm)
- Jul 11, 2022
Malware in tkumerzqghjfpnbo
1 compromised version
- Jul 11, 2022
Malicious code in tjfubskeyoiwraxc (npm)
- Jul 11, 2022
Malware in tjfubskeyoiwraxc
1 compromised version
- Jul 11, 2022
Malicious code in tkwhxmgnciqosbuy (npm)
- Jul 11, 2022
Malware in tkwhxmgnciqosbuy
1 compromised version
- Jul 11, 2022
Malicious code in toxpbqrshydnclkm (npm)
- Jul 11, 2022
Malware in toxpbqrshydnclkm
1 compromised version
- Jul 11, 2022
Malicious code in umbqstxngoajrkpi (npm)
- Jul 11, 2022
Malware in umbqstxngoajrkpi
1 compromised version
- Jul 11, 2022
Malicious code in vikcbhnystduflja (npm)
- Jul 11, 2022
Malicious code in umyqzkbhnjrgxscp (npm)
- Jul 11, 2022
Malware in umyqzkbhnjrgxscp
1 compromised version
- Jul 11, 2022
Malware in vikcbhnystduflja
1 compromised version
- Jul 11, 2022
Malicious code in vkchtoewspkjrfld (npm)
- Jul 11, 2022
Malware in vkchtoewspkjrfld
1 compromised version
- Jul 11, 2022
Malicious code in vjlruxeiqtanmkoy (npm)
- Jul 11, 2022
Malware in vjlruxeiqtanmkoy
1 compromised version
- Jul 11, 2022
Malicious code in vutnobryefzkjahl (npm)
- Jul 11, 2022
Malware in vutnobryefzkjahl
1 compromised version
- Jul 11, 2022
Malicious code in vxjhrydsqgpuobkf (npm)
- Jul 11, 2022
Malware in vxjhrydsqgpuobkf
1 compromised version
- Jul 11, 2022
Malicious code in wtbgzojhaiyermqk (npm)
- Jul 11, 2022
Malicious code in wrtpnhsguambxvkl (npm)
- Jul 11, 2022
Malware in wrtpnhsguambxvkl
1 compromised version
- Jul 11, 2022
Malware in wtbgzojhaiyermqk
1 compromised version
- Jul 11, 2022
Malicious code in wuoxgfrsikzvpdjm (npm)
- Jul 11, 2022
Malware in wuoxgfrsikzvpdjm
1 compromised version
- Jul 11, 2022
Malicious code in xascmlwhokkitdpz (npm)
- Jul 11, 2022
Malware in xascmlwhokkitdpz
1 compromised version
- Jul 11, 2022
Malicious code in xbsrnfhgmvzuowpa (npm)
- Jul 11, 2022
Malware in xbsrnfhgmvzuowpa
1 compromised version
- Jul 11, 2022
Malicious code in xenhtdmqjyzkrlbi (npm)
- Jul 11, 2022
Malware in xenhtdmqjyzkrlbi
1 compromised version
- Jul 11, 2022
Malicious code in xfjokryqncigbezs (npm)
- Jul 11, 2022
Malware in xfjokryqncigbezs
1 compromised version
- Jul 8, 2022
Malicious code in vue3-babel-js (npm)
- Jul 8, 2022
Malware in vue3-babel-js
1 compromised version
- Jul 8, 2022
Malicious code in @puresec/addressparser-malicious (npm)
Page 4869 of 5,078