Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jun 20, 2022
Malicious code in ikxtxeurxgismkw (npm)
- Jun 20, 2022
Malicious code in gtkjngikdbwkerg (npm)
- Jun 20, 2022
Malicious code in ebfptmozbzkpcgz (npm)
- Jun 20, 2022
Malware in ikxtxeurxgismkw
1 compromised version
- Jun 20, 2022
Malware in gtkjngikdbwkerg
1 compromised version
- Jun 20, 2022
Malware in ebfptmozbzkpcgz
1 compromised version
- Jun 20, 2022
Malicious code in zlpypfaaisdmzcc (npm)
- Jun 20, 2022
Malicious code in unserialize (npm)
- Jun 20, 2022
Malicious code in @ramp106/timetable (npm)
- Jun 20, 2022
Malicious code in leypamfdtqqmjky (npm)
- Jun 20, 2022
Malicious code in glqthhdjzbtyqrp (npm)
- Jun 20, 2022
Malicious code in fmbscnszjpxgusz (npm)
- Jun 20, 2022
Malicious code in @goatapp/web-content-components (npm)
- Jun 20, 2022
Malicious code in exjswrtrilypbhn (npm)
- Jun 20, 2022
Malicious code in dcihaockmzqwwof (npm)
- Jun 20, 2022
Malicious code in bcp-ui (npm)
- Jun 20, 2022
Malware in @ramp106/timetable
1 compromised version
- Jun 20, 2022
Malware in unserialize
1 compromised version
- Jun 20, 2022
Malware in leypamfdtqqmjky
1 compromised version
- Jun 20, 2022
Malware in @goatapp/web-content-components
1 compromised version
- Jun 20, 2022
Malware in zlpypfaaisdmzcc
1 compromised version
- Jun 20, 2022
Malware in fmbscnszjpxgusz
1 compromised version
- Jun 20, 2022
Malware in glqthhdjzbtyqrp
1 compromised version
- Jun 20, 2022
Malware in exjswrtrilypbhn
1 compromised version
- Jun 20, 2022
Malware in bcp-ui
1 compromised version
- Jun 20, 2022
Malware in dcihaockmzqwwof
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.mathematics (npm)
- Jun 20, 2022
Malicious code in com.unity.editorcoroutines (npm)
- Jun 20, 2022
Malware in com.unity.editorcoroutines
1 compromised version
- Jun 20, 2022
Malware in com.unity.mathematics
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.uielementsnative (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.subsystems (npm)
- Jun 20, 2022
Malicious code in com.unity.burst (npm)
- Jun 20, 2022
Malware in com.unity.modules.uielementsnative
1 compromised version
- Jun 20, 2022
Malware in com.unity.burst
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.subsystems
1 compromised version
- Jun 20, 2022
Malicious code in colors-helper (npm)
- Jun 20, 2022
Malicious code in colors-help (npm)
- Jun 20, 2022
Malware in colors-helper
1 compromised version
- Jun 20, 2022
Malware in colors-help
1 compromised version
- Jun 20, 2022
Malicious code in agoric-servers (npm)
- Jun 20, 2022
Malicious code in upgrade-challenge (npm)
- Jun 20, 2022
Malicious code in npm-mega (npm)
- Jun 20, 2022
Malicious code in megamanz07007 (npm)
- Jun 20, 2022
Malicious code in megaman0072 (npm)
- Jun 20, 2022
Malicious code in helix-status-service (npm)
- Jun 20, 2022
Malicious code in helix-slack-notification (npm)
- Jun 20, 2022
Malicious code in helix-run-query (npm)
- Jun 20, 2022
Malicious code in helix-contentsource-connector (npm)
- Jun 20, 2022
Malicious code in git-dependency-maker (npm)
Page 5055 of 5,078