Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malware in lodasr.debvuce
1 compromised version
- Aug 19, 2022
Malware in lpodash-
1 compromised version
- Aug 19, 2022
Malware in lodash.reerghe
1 compromised version
- Aug 19, 2022
Malware in mdz5-ile
1 compromised version
- Aug 19, 2022
Malware in lut-eljment
1 compromised version
- Aug 19, 2022
Malware in loade3r-utisl
1 compromised version
- Aug 19, 2022
Malware in jsoescheam
1 compromised version
- Aug 19, 2022
Malware in kauram
1 compromised version
- Aug 19, 2022
Malware in jmadanada-base64
1 compromised version
- Aug 19, 2022
Malware in lodash.isstgrng
1 compromised version
- Aug 19, 2022
Malware in itfile-saver
1 compromised version
- Aug 19, 2022
Malware in ko-astatiqc
1 compromised version
- Aug 19, 2022
Malware in mhgrked
1 compromised version
- Aug 19, 2022
Malware in lowashcamelcase
1 compromised version
- Aug 19, 2022
Malware in kara-phantomjs-launcher
1 compromised version
- Aug 19, 2022
Malware in logn-updata
1 compromised version
- Aug 19, 2022
Malware in json-st7rzingif-safe
1 compromised version
- Aug 19, 2022
Malware in jseon-loador
1 compromised version
- Aug 19, 2022
Malware in inherigss
1 compromised version
- Aug 19, 2022
Malware in irmraf
1 compromised version
- Aug 19, 2022
Malware in mepjow
1 compromised version
- Aug 19, 2022
Malware in me4ealsmith
1 compromised version
- Aug 19, 2022
Malware in log-symbosl
1 compromised version
- Aug 19, 2022
Malware in lkodash.isequa
1 compromised version
- Aug 19, 2022
Malware in i-wls
1 compromised version
- Aug 19, 2022
Malware in memizea-one
1 compromised version
- Aug 19, 2022
Malware in koaylogge
1 compromised version
- Aug 19, 2022
Malware in jhasj-sum
1 compromised version
- Aug 19, 2022
Malware in minimhc
1 compromised version
- Aug 19, 2022
Malware in mbjthods
1 compromised version
- Aug 19, 2022
Malware in isntall
1 compromised version
- Aug 19, 2022
Malware in jaspine-coer
1 compromised version
- Aug 19, 2022
Malware in jkhgint
1 compromised version
- Aug 19, 2022
Malware in keyprss
1 compromised version
- Aug 19, 2022
Malware in lru-cahle
1 compromised version
- Aug 19, 2022
Malware in isomorphi-cetch
1 compromised version
- Aug 19, 2022
Malware in lodashuiq
1 compromised version
- Aug 19, 2022
Malware in lefko-pd
1 compromised version
- Aug 19, 2022
Malware in lfj
1 compromised version
- Aug 19, 2022
Malware in kuvp-less
1 compromised version
- Aug 19, 2022
Malware in lrypeto
1 compromised version
- Aug 19, 2022
Malicious code in -harseurl (npm)
- Aug 19, 2022
Malicious code in -gzip-ize (npm)
- Aug 19, 2022
Malicious code in invairant (npm)
- Aug 19, 2022
Malicious code in inipyrser (npm)
- Aug 19, 2022
Malicious code in infoectin (npm)
- Aug 19, 2022
Malicious code in immutability-huelperr (npm)
- Aug 19, 2022
Malicious code in imaqge-sie (npm)
- Aug 19, 2022
Malicious code in iedux (npm)
- Aug 19, 2022
Malicious code in hytm-loader (npm)
Page 6366 of 6,634