Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in postcss-fleexbugs-fixs (npm)
- Aug 19, 2022
Malicious code in pop9erwjs (npm)
- Aug 19, 2022
Malicious code in poostcss-imort (npm)
- Aug 19, 2022
Malicious code in plis (npm)
- Aug 19, 2022
Malicious code in phantwomj (npm)
- Aug 19, 2022
Malicious code in pgu (npm)
- Aug 19, 2022
Malicious code in pfstcgss (npm)
- Aug 19, 2022
Malicious code in penzpyme-adapter-2react-16 (npm)
- Aug 19, 2022
Malicious code in peep-assign (npm)
- Aug 19, 2022
Malicious code in path-to-reugep (npm)
- Aug 19, 2022
Malicious code in pasrsw5 (npm)
- Aug 19, 2022
Malicious code in p4assport-oatuh2 (npm)
- Aug 19, 2022
Malicious code in oujec.assigs (npm)
- Aug 19, 2022
Malicious code in oug-cookie (npm)
- Aug 19, 2022
Malicious code in opy-wepback-plugin (npm)
- Aug 19, 2022
Malicious code in opstimlst (npm)
- Aug 19, 2022
Malicious code in ooa-mqonut (npm)
- Aug 19, 2022
Malicious code in onrmalize.cssl (npm)
- Aug 19, 2022
Malicious code in onmnnm (npm)
- Aug 19, 2022
Malicious code in ommand-eixsts (npm)
- Aug 19, 2022
Malicious code in om-helers (npm)
- Aug 19, 2022
Malicious code in ollup-pugincommonjs (npm)
- Aug 19, 2022
Malicious code in ojment (npm)
- Aug 19, 2022
Malicious code in odash.fareach (npm)
- Aug 19, 2022
Malicious code in oaut (npm)
- Aug 19, 2022
Malicious code in o7nyfinished (npm)
- Aug 19, 2022
Malicious code in nuynjc6ks (npm)
- Aug 19, 2022
Malicious code in nuique-random-arr-y (npm)
- Aug 19, 2022
Malicious code in nrmalize-usl (npm)
- Aug 19, 2022
Malicious code in nrmadanadaogress (npm)
- Aug 19, 2022
Malicious code in npomog (npm)
- Aug 19, 2022
Malicious code in npm-run-lal (npm)
- Aug 19, 2022
Malicious code in nodmeon (npm)
- Aug 19, 2022
Malware in postcss-fleexbugs-fixs
1 compromised version
- Aug 19, 2022
Malware in oujec.assigs
1 compromised version
- Aug 19, 2022
Malware in o7nyfinished
1 compromised version
- Aug 19, 2022
Malware in path-to-reugep
1 compromised version
- Aug 19, 2022
Malware in nuynjc6ks
1 compromised version
- Aug 19, 2022
Malware in opy-wepback-plugin
1 compromised version
- Aug 19, 2022
Malware in pfstcgss
1 compromised version
- Aug 19, 2022
Malware in nrmadanadaogress
1 compromised version
- Aug 19, 2022
Malware in plis
1 compromised version
- Aug 19, 2022
Malware in ojment
1 compromised version
- Aug 19, 2022
Malware in odash.fareach
1 compromised version
- Aug 19, 2022
Malware in oaut
1 compromised version
- Aug 19, 2022
Malware in nrmalize-usl
1 compromised version
- Aug 19, 2022
Malware in pasrsw5
1 compromised version
- Aug 19, 2022
Malware in pretiy-ytes
1 compromised version
- Aug 19, 2022
Malware in phantwomj
1 compromised version
- Aug 19, 2022
Malware in p4assport-oatuh2
1 compromised version
Page 6363 of 6,634