Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 11, 2024
Malicious code in fontawesom-1 (npm)
- Jul 11, 2024
Malware in fontawesom-1
1 compromised version
- Jul 11, 2024
Malware in fontawessome
1 compromised version
- Jul 11, 2024
Malicious code in styleshteks (npm)
1 compromised version
- Jul 11, 2024
Malware in styleshteks
1 compromised version
- Jul 11, 2024
Malicious code in styyle (npm)
1 compromised version
- Jul 11, 2024
Malicious code in my-gh (npm)
- Jul 11, 2024
Malware in styyle
1 compromised version
- Jul 11, 2024
Malware in my-gh
1 compromised version
- Jul 11, 2024
Malicious code in sytlesheets (npm)
- Jul 11, 2024
Malicious code in stylessheet (npm)
1 compromised version
- Jul 11, 2024
Malicious code in jquerrty (npm)
1 compromised version
- Jul 11, 2024
Malicious code in footericonds (npm)
- Jul 11, 2024
Malware in stylessheet
1 compromised version
- Jul 11, 2024
Malware in sytlesheets
1 compromised version
- Jul 11, 2024
Malware in footericonds
1 compromised version
- Jul 11, 2024
Malware in jquerrty
1 compromised version
- Jul 11, 2024
Malicious code in footersicons (npm)
1 compromised version
- Jul 11, 2024
Malware in footersicons
1 compromised version
- Jul 11, 2024
Malicious code in rgmedia21 (npm)
1 compromised version
- Jul 11, 2024
Malicious code in rgmedia (npm)
- Jul 11, 2024
Malicious code in ngentot (npm)
- Jul 11, 2024
Malware in rgmedia21
1 compromised version
- Jul 11, 2024
Malware in rgmedia
1 compromised version
- Jul 11, 2024
Malware in ngentot
1 compromised version
- Jul 11, 2024
Malicious code in dimaspedia (npm)
- Jul 11, 2024
Malware in dimaspedia
1 compromised version
- Jul 11, 2024
Malicious code in ganz (npm)
- Jul 11, 2024
Malware in ganz
1 compromised version
- Jul 11, 2024
Malicious code in kurxjy (npm)
1 compromised version
- Jul 11, 2024
Malicious code in kinthailxzz (npm)
- Jul 11, 2024
Malware in kurxjy
1 compromised version
- Jul 11, 2024
Malware in kinthailxzz
1 compromised version
- Jul 11, 2024
Malicious code in yorz (npm)
- Jul 11, 2024
Malware in yorz
1 compromised version
- Jul 11, 2024
Malicious code in pepeksyep (npm)
- Jul 11, 2024
Malicious code in pepek (npm)
- Jul 11, 2024
Malicious code in pempers (npm)
1 compromised version
- Jul 11, 2024
Malicious code in newsda (npm)
- Jul 11, 2024
Malicious code in kikos (npm)
1 compromised version
- Jul 11, 2024
Malicious code in imagegs (npm)
1 compromised version
- Jul 11, 2024
Malicious code in hdhdh (npm)
- Jul 11, 2024
Malware in pepek
1 compromised version
- Jul 11, 2024
Malware in newsda
1 compromised version
- Jul 11, 2024
Malware in pempers
1 compromised version
- Jul 11, 2024
Malware in imagegs
1 compromised version
- Jul 11, 2024
Malware in pepeksyep
1 compromised version
- Jul 11, 2024
Malware in hdhdh
1 compromised version
- Jul 11, 2024
Malware in kikos
1 compromised version
- Jul 11, 2024
Malicious code in stylesyosx (npm)
1 compromised version
Page 6146 of 6,646