Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Oct 16, 2024
Malicious code in ideological-peach-scallop (npm)
1 compromised version
- Oct 16, 2024
Malicious code in icons-material (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in iarna (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in hyuimsoue (npm)
1 compromised version
- Oct 16, 2024
Malicious code in hwoiers (npm)
1 compromised version
- Oct 16, 2024
Malicious code in hwoeiw (npm)
1 compromised version
- Oct 16, 2024
Malicious code in hwieuw (npm)
1 compromised version
- Oct 16, 2024
Malicious code in husheor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in hiwoeusd (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in hioebieor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in heavy-maroon-gazelle (npm)
1 compromised version
- Oct 16, 2024
Malicious code in harthat-cookie (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in handlebars-helper-attrs (npm)
1 compromised version
- Oct 16, 2024
Malicious code in hackeryajemaaa (npm)
1 compromised version
- Oct 16, 2024
Malicious code in gwoeurt (npm)
1 compromised version
- Oct 16, 2024
Malicious code in graphiler (npm)
1 compromised version
- Oct 16, 2024
Malicious code in gql-tag-operations (npm)
1 compromised version
- Oct 16, 2024
Malicious code in gp-analytics (npm)
1 compromised version
- Oct 16, 2024
Malicious code in glimmerer (npm)
1 compromised version
- Oct 16, 2024
Malicious code in github-loader (npm)
1 compromised version
- Oct 16, 2024
Malicious code in gioenduek (npm)
1 compromised version
- Oct 16, 2024
Malicious code in get-hydrated-cms-data (npm)
1 compromised version
- Oct 16, 2024
Malicious code in genuine-azure-swordtail (npm)
1 compromised version
- Oct 16, 2024
Malicious code in generalytics (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in gcptestpackagepoc (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in full-crimson-shark (npm)
1 compromised version
- Oct 16, 2024
Malicious code in fs-read-file (npm)
1 compromised version
- Oct 16, 2024
Malicious code in frozen-violet-sailfish (npm)
1 compromised version
- Oct 16, 2024
Malicious code in freebsd-x64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in flormar-global (npm)
1 compromised version
- Oct 16, 2024
Malicious code in flarer (npm)
1 compromised version
- Oct 16, 2024
Malicious code in flaky-coffee-wren (npm)
1 compromised version
- Oct 16, 2024
Malicious code in feature-targeting (npm)
1 compromised version
- Oct 16, 2024
Malicious code in fb-group (npm)
1 compromised version
- Oct 16, 2024
Malicious code in fatest-distube (npm)
1 compromised version
- Oct 16, 2024
Malicious code in far-teal-platypus (npm)
1 compromised version
- Oct 16, 2024
Malicious code in far-gray-pike (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-paragraph (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-image (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-horizontal-rule (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-heading (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-hard-break (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-gapcursor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-floating-menu (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-dropcursor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-document (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-bullet-list (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-bubble-menu (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-bold (npm)
1 compromised version
- Oct 16, 2024
Malicious code in extension-blockquote (npm)
1 compromised version
Page 6079 of 6,646