Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malware in edx-logger
1 compromised version
- Aug 19, 2022
Malware in elsint-plujin-no5e
1 compromised version
- Aug 19, 2022
Malware in eslint-plugincxst
1 compromised version
- Aug 19, 2022
Malware in enthereumjsu-til
1 compromised version
- Aug 19, 2022
Malware in figusr
1 compromised version
- Aug 19, 2022
Malware in dvodash.idsempty
1 compromised version
- Aug 19, 2022
Malware in eslinft-pluuin-import
1 compromised version
- Aug 19, 2022
Malware in eslintr-plugzn-promise
1 compromised version
- Aug 19, 2022
Malware in f1pen
1 compromised version
- Aug 19, 2022
Malware in edbouce
1 compromised version
- Aug 19, 2022
Malware in fhlljs
1 compromised version
- Aug 19, 2022
Malware in efcdege
1 compromised version
- Aug 19, 2022
Malware in eslint-plwgin-stdnard
1 compromised version
- Aug 19, 2022
Malware in fasclck
1 compromised version
- Aug 19, 2022
Malware in dowloa
1 compromised version
- Aug 19, 2022
Malware in eoman-dnvironment
1 compromised version
- Aug 19, 2022
Malware in eslint-conig-prezier
1 compromised version
- Aug 19, 2022
Malware in fiet
1 compromised version
- Aug 19, 2022
Malware in es6shi
1 compromised version
- Aug 19, 2022
Malware in eact-transdtion-grouw
1 compromised version
- Aug 19, 2022
Malware in es9-prhmise
1 compromised version
- Aug 19, 2022
Malware in ddte-fdns
1 compromised version
- Aug 19, 2022
Malware in deepemrge
1 compromised version
- Aug 19, 2022
Malicious code in crypt-osj (npm)
- Aug 19, 2022
Malicious code in create-hshs (npm)
- Aug 19, 2022
Malicious code in crar (npm)
- Aug 19, 2022
Malicious code in content-tep (npm)
- Aug 19, 2022
Malicious code in coninect-flksh (npm)
- Aug 19, 2022
Malicious code in commont-6ls (npm)
- Aug 19, 2022
Malicious code in cmmande (npm)
- Aug 19, 2022
Malicious code in clipobard (npm)
- Aug 19, 2022
Malicious code in cli-tabkle2 (npm)
- Aug 19, 2022
Malicious code in clbena-css (npm)
- Aug 19, 2022
Malicious code in cl.i-psinner (npm)
- Aug 19, 2022
Malicious code in ckfors (npm)
- Aug 19, 2022
Malicious code in chokdazr (npm)
- Aug 19, 2022
Malicious code in chartzj (npm)
- Aug 19, 2022
Malicious code in chanbfe (npm)
- Aug 19, 2022
Malicious code in chal (npm)
- Aug 19, 2022
Malicious code in cd5 (npm)
- Aug 19, 2022
Malicious code in canavs (npm)
- Aug 19, 2022
Malicious code in cam.flcase (npm)
- Aug 19, 2022
Malicious code in c6lipboady (npm)
- Aug 19, 2022
Malicious code in bytebufevr (npm)
- Aug 19, 2022
Malicious code in bxroccoli-funnqel (npm)
- Aug 19, 2022
Malicious code in bv4 (npm)
- Aug 19, 2022
Malicious code in bubird (npm)
- Aug 19, 2022
Malicious code in brsolve-from (npm)
- Aug 19, 2022
Malicious code in bostcs-perset-env (npm)
- Aug 19, 2022
Malicious code in boject-path (npm)
Page 6370 of 6,634