Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Oct 16, 2024
Malicious code in zxlaq2 (npm)
- Oct 16, 2024
Malicious code in y7s8cl (npm)
- Oct 16, 2024
Malicious code in wi82py (npm)
- Oct 16, 2024
Malicious code in wh2wlc (npm)
- Oct 16, 2024
Malicious code in w3jp6x (npm)
- Oct 16, 2024
Malicious code in t8h4q4 (npm)
- Oct 16, 2024
Malicious code in ssp5z6 (npm)
- Oct 16, 2024
Malicious code in ohxnve (npm)
- Oct 16, 2024
Malicious code in lyt2tn (npm)
- Oct 16, 2024
Malicious code in l12n85 (npm)
- Oct 16, 2024
Malicious code in kald0a (npm)
- Oct 16, 2024
Malicious code in hpkofi (npm)
- Oct 16, 2024
Malicious code in gwqhnw (npm)
- Oct 16, 2024
Malicious code in gvjtly (npm)
- Oct 16, 2024
Malicious code in gozbq0 (npm)
- Oct 16, 2024
Malicious code in fzscqi (npm)
- Oct 16, 2024
Malicious code in fuh0qz (npm)
- Oct 16, 2024
Malicious code in elk1yf (npm)
- Oct 16, 2024
Malicious code in dhwmfs (npm)
- Oct 16, 2024
Malicious code in avail-able-albu-m-down-load-15496-morning-view-pbn51-tjmcxv (npm)
- Oct 16, 2024
Malicious code in ava-ilable-down-load-mp3-today-270969-hey-clockface-5qct6-gknhcu (npm)
- Oct 16, 2024
Malicious code in agl9v7 (npm)
- Oct 16, 2024
Malicious code in 9s10yo (npm)
- Oct 16, 2024
Malicious code in 8ng20w (npm)
- Oct 16, 2024
Malicious code in 844b5t (npm)
- Oct 16, 2024
Malicious code in 7qt8hl (npm)
- Oct 16, 2024
Malicious code in 7phpfm (npm)
- Oct 16, 2024
Malicious code in 5pjh9i (npm)
- Oct 16, 2024
Malicious code in 52qr42 (npm)
- Oct 16, 2024
Malicious code in 4xrkhv (npm)
- Oct 16, 2024
Malicious code in 4tj82n (npm)
- Oct 16, 2024
Malicious code in 4i0g5z (npm)
- Oct 16, 2024
Malicious code in 2pozw6 (npm)
- Oct 16, 2024
Malicious code in 2mul1k (npm)
- Oct 16, 2024
Malware in 9s10yo
1 compromised version
- Oct 16, 2024
Malware in elk1yf
1 compromised version
- Oct 16, 2024
Malware in gvjtly
1 compromised version
- Oct 16, 2024
Malware in hpkofi
1 compromised version
- Oct 16, 2024
Malware in 2pozw6
1 compromised version
- Oct 16, 2024
Malware in 52qr42
1 compromised version
- Oct 16, 2024
Malware in 4xrkhv
1 compromised version
- Oct 16, 2024
Malware in zxlaq2
1 compromised version
- Oct 16, 2024
Malware in 4i0g5z
1 compromised version
- Oct 16, 2024
Malware in gozbq0
1 compromised version
- Oct 16, 2024
Malware in wi82py
1 compromised version
- Oct 16, 2024
Malware in fzscqi
1 compromised version
- Oct 16, 2024
Malware in 5pjh9i
1 compromised version
- Oct 16, 2024
Malware in lyt2tn
1 compromised version
- Oct 16, 2024
Malware in 8ng20w
1 compromised version
- Oct 16, 2024
Malware in fuh0qz
1 compromised version
Page 6070 of 6,646