Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 4, 2024
Malware in @zitterorg/possimus-corrupti
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/repudiandae-blanditiis
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/aperiam-nisi
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/amet-accusamus
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/voluptate-voluptatem
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/sunt-consequuntur
1 compromised version
- Jul 4, 2024
Malicious code in @zitterorg/velit-dicta (npm)
- Jul 4, 2024
Malicious code in @zitterorg/vel-at-tenetur (npm)
- Jul 4, 2024
Malicious code in @zitterorg/upgraded-fishstick (npm)
- Jul 4, 2024
Malicious code in @zitterorg/totam-aliquid (npm)
- Jul 4, 2024
Malicious code in @zitterorg/sunt-vel-nam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/soluta-saepe (npm)
- Jul 4, 2024
Malicious code in @zitterorg/soluta-ratione (npm)
- Jul 4, 2024
Malicious code in @zitterorg/sit-vel-delectus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/sint-dolore-autem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/repellendus-impedit-repellendus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/reiciendis-ex-fuga (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quis-maxime (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quia-sapiente (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quia-fugit-magni (npm)
- Jul 4, 2024
Malicious code in @zitterorg/qui-doloremque (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quasi-quidem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quas-in-suscipit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quae-nulla (npm)
- Jul 4, 2024
Malicious code in @zitterorg/porro-asperiores (npm)
- Jul 4, 2024
Malicious code in @zitterorg/placeat-a (npm)
- Jul 4, 2024
Malicious code in @zitterorg/perferendis-id (npm)
- Jul 4, 2024
Malicious code in @zitterorg/odit-impedit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nihil-consectetur-tempore (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nesciunt-quas (npm)
- Jul 4, 2024
Malicious code in @zitterorg/necessitatibus-doloremque (npm)
- Jul 4, 2024
Malicious code in @zitterorg/mollitia-totam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/mollitia-laborum-nesciunt (npm)
- Jul 4, 2024
Malicious code in @zitterorg/molestiae-soluta (npm)
- Jul 4, 2024
Malicious code in @zitterorg/magni-fugit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/magni-eos (npm)
- Jul 4, 2024
Malicious code in @zitterorg/libero-vitae-at (npm)
- Jul 4, 2024
Malicious code in @zitterorg/laudantium-deleniti (npm)
- Jul 4, 2024
Malicious code in @zitterorg/iure-ut (npm)
- Jul 4, 2024
Malicious code in @zitterorg/ipsum-magnam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/inventore-facere (npm)
- Jul 4, 2024
Malicious code in @zitterorg/hic-suscipit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/fugiat-quia (npm)
- Jul 4, 2024
Malicious code in @zitterorg/fuga-maiores-architecto (npm)
- Jul 4, 2024
Malicious code in @zitterorg/facere-id (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eveniet-provident (npm)
- Jul 4, 2024
Malicious code in @zitterorg/est-sunt-quos (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eius-atque-itaque (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eaque-quis-culpa (npm)
- Jul 4, 2024
Malicious code in @zitterorg/dolores-consequatur (npm)
Page 6153 of 6,646