Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malware in supoertes
1 compromised version
- Aug 19, 2022
Malware in tld5ify
1 compromised version
- Aug 19, 2022
Malware in tinhcyxolor2
1 compromised version
- Aug 19, 2022
Malware in sw-prescache-wubpack-plugin
1 compromised version
- Aug 19, 2022
Malware in tslnit
1 compromised version
- Aug 19, 2022
Malware in umreral
1 compromised version
- Aug 19, 2022
Malware in tldyfy
1 compromised version
- Aug 19, 2022
Malware in tsilnt
1 compromised version
- Aug 19, 2022
Malware in ug-lifjjs-webpack-plugin
1 compromised version
- Aug 19, 2022
Malware in strip-json-combmentd
1 compromised version
- Aug 19, 2022
Malware in stcak-trace
1 compromised version
- Aug 19, 2022
Malware in ulp-watcgh
1 compromised version
- Aug 19, 2022
Malware in ttpd-erors
1 compromised version
- Aug 19, 2022
Malware in text-ytabl
1 compromised version
- Aug 19, 2022
Malware in style-componenx
1 compromised version
- Aug 19, 2022
Malware in traecr
1 compromised version
- Aug 19, 2022
Malware in stlintreact
1 compromised version
- Aug 19, 2022
Malware in thgroukgg
1 compromised version
- Aug 19, 2022
Malware in stklus-loaer
1 compromised version
- Aug 19, 2022
Malicious code in source-ap-loadper (npm)
- Aug 19, 2022
Malicious code in soudl (npm)
- Aug 19, 2022
Malicious code in son-stringiy-safe (npm)
- Aug 19, 2022
Malicious code in socket.ioo-cient (npm)
- Aug 19, 2022
Malicious code in soarou0er (npm)
- Aug 19, 2022
Malicious code in slughifvy (npm)
- Aug 19, 2022
Malicious code in slit-stged (npm)
- Aug 19, 2022
Malicious code in sint-plugin-prkomise (npm)
- Aug 19, 2022
Malicious code in simplegi (npm)
- Aug 19, 2022
Malicious code in showadlown (npm)
- Aug 19, 2022
Malicious code in shint (npm)
- Aug 19, 2022
Malicious code in sh0rtiwd (npm)
- Aug 19, 2022
Malicious code in sfit (npm)
- Aug 19, 2022
Malicious code in sfebuffer (npm)
- Aug 19, 2022
Malicious code in seuzelizke (npm)
- Aug 19, 2022
Malicious code in serh-eindex (npm)
- Aug 19, 2022
Malicious code in sequxeliwz (npm)
- Aug 19, 2022
Malicious code in senbg (npm)
- Aug 19, 2022
Malicious code in semvee-index (npm)
- Aug 19, 2022
Malicious code in semre (npm)
- Aug 19, 2022
Malicious code in semantic-u-resct (npm)
- Aug 19, 2022
Malicious code in semanitco-i-react (npm)
- Aug 19, 2022
Malicious code in seacpe-string-regexp (npm)
- Aug 19, 2022
Malicious code in se4raverse (npm)
- Aug 19, 2022
Malicious code in sass-lwadeoq (npm)
- Aug 19, 2022
Malicious code in sass-loadre (npm)
- Aug 19, 2022
Malicious code in sanitize-figlgname (npm)
- Aug 19, 2022
Malicious code in saniibe-filename (npm)
- Aug 19, 2022
Malicious code in saciize-html (npm)
- Aug 19, 2022
Malicious code in s3en (npm)
- Aug 19, 2022
Malicious code in rzedux-thunak (npm)
Page 6359 of 6,634