Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,005 total in npm · sorted newest first- Jun 20, 2022
Malware in @airbytehq/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @abbvie/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @8x8/fetlife-assets (npm)
- Jun 20, 2022
Malware in @8x8/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @abbvie/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @13tv/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in ngx-translate (npm)
- Jun 20, 2022
Malicious code in headcache (npm)
- Jun 20, 2022
Malicious code in @eb1a3227cdc3fedbaec2fe38bf6c044a/do-not-install (npm)
- Jun 20, 2022
Malware in @13tv/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in headcache
1 compromised version
- Jun 20, 2022
Malware in @eb1a3227cdc3fedbaec2fe38bf6c044a/do-not-install
1 compromised version
- Jun 20, 2022
Malware in ngx-translate
1 compromised version
- Jun 20, 2022
Malicious code in rlms (npm)
- Jun 20, 2022
Malware in rlms
1 compromised version
- Jun 20, 2022
Malicious code in iiipkillkdeqcyh (npm)
- Jun 20, 2022
Malware in iiipkillkdeqcyh
1 compromised version
- Jun 20, 2022
Malicious code in lqxebnynzfszeuh (npm)
- Jun 20, 2022
Malware in lqxebnynzfszeuh
1 compromised version
- Jun 20, 2022
Malicious code in cito-social (npm)
- Jun 20, 2022
Malware in cito-social
1 compromised version
- Jun 20, 2022
Malicious code in ahkgnrjyrlwqopq (npm)
- Jun 20, 2022
Malicious code in dckvisgimhpbkhd (npm)
- Jun 20, 2022
Malicious code in cgxlmojuyqadjgp (npm)
- Jun 20, 2022
Malware in ahkgnrjyrlwqopq
1 compromised version
- Jun 20, 2022
Malware in dckvisgimhpbkhd
1 compromised version
- Jun 20, 2022
Malware in cgxlmojuyqadjgp
1 compromised version
- Jun 20, 2022
Malicious code in ikxtxeurxgismkw (npm)
- Jun 20, 2022
Malicious code in gtkjngikdbwkerg (npm)
- Jun 20, 2022
Malicious code in ebfptmozbzkpcgz (npm)
- Jun 20, 2022
Malware in ikxtxeurxgismkw
1 compromised version
- Jun 20, 2022
Malware in gtkjngikdbwkerg
1 compromised version
- Jun 20, 2022
Malware in ebfptmozbzkpcgz
1 compromised version
- Jun 20, 2022
Malicious code in zlpypfaaisdmzcc (npm)
- Jun 20, 2022
Malicious code in unserialize (npm)
- Jun 20, 2022
Malicious code in @ramp106/timetable (npm)
- Jun 20, 2022
Malicious code in leypamfdtqqmjky (npm)
- Jun 20, 2022
Malicious code in glqthhdjzbtyqrp (npm)
- Jun 20, 2022
Malicious code in fmbscnszjpxgusz (npm)
- Jun 20, 2022
Malicious code in @goatapp/web-content-components (npm)
- Jun 20, 2022
Malicious code in exjswrtrilypbhn (npm)
- Jun 20, 2022
Malicious code in dcihaockmzqwwof (npm)
- Jun 20, 2022
Malicious code in bcp-ui (npm)
- Jun 20, 2022
Malware in @ramp106/timetable
1 compromised version
- Jun 20, 2022
Malware in unserialize
1 compromised version
- Jun 20, 2022
Malware in leypamfdtqqmjky
1 compromised version
- Jun 20, 2022
Malware in @goatapp/web-content-components
1 compromised version
- Jun 20, 2022
Malware in zlpypfaaisdmzcc
1 compromised version
- Jun 20, 2022
Malware in fmbscnszjpxgusz
1 compromised version
- Jun 20, 2022
Malware in glqthhdjzbtyqrp
1 compromised version
Page 4937 of 4,961