Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malware in clbena-css
1 compromised version
- Aug 19, 2022
Malware in crypt-osj
1 compromised version
- Aug 19, 2022
Malware in bdfen
1 compromised version
- Aug 19, 2022
Malware in create-hshs
1 compromised version
- Aug 19, 2022
Malware in cli-tabkle2
1 compromised version
- Aug 19, 2022
Malware in c6lipboady
1 compromised version
- Aug 19, 2022
Malware in baelgenerbtor
1 compromised version
- Aug 19, 2022
Malware in babel-plugin-transform3react-remove-prop-t8pes
1 compromised version
- Aug 19, 2022
Malware in babel-lugin-dynamic-i9port-node
1 compromised version
- Aug 19, 2022
Malware in babel-pzugin-transform-es2015-modues-commonjs
1 compromised version
- Aug 19, 2022
Malware in b4lesised
1 compromised version
- Aug 19, 2022
Malware in cl.i-psinner
1 compromised version
- Aug 19, 2022
Malware in canavs
1 compromised version
- Aug 19, 2022
Malware in cmmande
1 compromised version
- Aug 19, 2022
Malware in bxroccoli-funnqel
1 compromised version
- Aug 19, 2022
Malware in chal
1 compromised version
- Aug 19, 2022
Malware in bi9
1 compromised version
- Aug 19, 2022
Malware in commont-6ls
1 compromised version
- Aug 19, 2022
Malware in bfrf
1 compromised version
- Aug 19, 2022
Malicious code in adm-gp (npm)
- Aug 19, 2022
Malicious code in reacttrans8tiongroup (npm)
- Aug 19, 2022
Malicious code in reacttapefentplugin (npm)
- Aug 19, 2022
Malicious code in reactroterre3dux (npm)
- Aug 19, 2022
Malicious code in reactrdeux (npm)
- Aug 19, 2022
Malicious code in reactonclcikoutside (npm)
- Aug 19, 2022
Malicious code in reactmbrkdown (npm)
- Aug 19, 2022
Malicious code in reactlifecyclesycompat (npm)
- Aug 19, 2022
Malicious code in reacthotloaer (npm)
- Aug 19, 2022
Malicious code in reactdncdhtml5backend (npm)
- Aug 19, 2022
Malicious code in reactaddonsshllowcomarfe (npm)
- Aug 19, 2022
Malicious code in reactaddonscsstransitiong5rop (npm)
- Aug 19, 2022
Malicious code in reachelmet (npm)
- Aug 19, 2022
Malicious code in reacapppolyfill (npm)
- Aug 19, 2022
Malicious code in reacamlotoin (npm)
- Aug 19, 2022
Malicious code in rduxsaga (npm)
- Aug 19, 2022
Malicious code in rdeepgextend (npm)
- Aug 19, 2022
Malicious code in rcutii (npm)
- Aug 19, 2022
Malicious code in rcsolvefrom (npm)
- Aug 19, 2022
Malicious code in rbsove (npm)
- Aug 19, 2022
Malicious code in rbabeaafy (npm)
- Aug 19, 2022
Malicious code in rawoader (npm)
- Aug 19, 2022
Malicious code in rawbdoy (npm)
- Aug 19, 2022
Malicious code in randoxlmstoing (npm)
- Aug 19, 2022
Malicious code in randovbyte (npm)
- Aug 19, 2022
Malicious code in raedpkgup (npm)
- Aug 19, 2022
Malicious code in racvxen (npm)
- Aug 19, 2022
Malicious code in ractnative (npm)
- Aug 19, 2022
Malicious code in quewynstring (npm)
- Aug 19, 2022
Malicious code in qmt (npm)
- Aug 19, 2022
Malicious code in qeralport (npm)
Page 6372 of 6,634