Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in oenzymeadapterreact16 (npm)
- Aug 19, 2022
Malicious code in odeforge (npm)
- Aug 19, 2022
Malicious code in odecache (npm)
- Aug 19, 2022
Malicious code in odashthrottle (npm)
- Aug 19, 2022
Malicious code in odashes (npm)
- Aug 19, 2022
Malicious code in oc8etio (npm)
- Aug 19, 2022
Malicious code in objetpath (npm)
- Aug 19, 2022
Malicious code in objecgasissgn (npm)
- Aug 19, 2022
Malicious code in objebtassign (npm)
- Aug 19, 2022
Malicious code in nydeemoji (npm)
- Aug 19, 2022
Malicious code in nurijfs (npm)
- Aug 19, 2022
Malicious code in nunjcke (npm)
- Aug 19, 2022
Malicious code in nsiscoldrs (npm)
- Aug 19, 2022
Malicious code in nrecompos4 (npm)
- Aug 19, 2022
Malicious code in noseaixer (npm)
- Aug 19, 2022
Malicious code in normaslizecss (npm)
- Aug 19, 2022
Malicious code in normalilzeurl (npm)
- Aug 19, 2022
Malicious code in normaliewheel (npm)
- Aug 19, 2022
Malicious code in nokdepregyjp (npm)
- Aug 19, 2022
Malicious code in nodenotiier (npm)
- Aug 19, 2022
Malicious code in nodehass (npm)
- Aug 19, 2022
Malicious code in nodeglp (npm)
- Aug 19, 2022
Malicious code in nodeg5i (npm)
- Aug 19, 2022
Malicious code in nodeech (npm)
- Aug 19, 2022
Malicious code in noddir (npm)
- Aug 19, 2022
Malicious code in nldeuuid (npm)
- Aug 19, 2022
Malicious code in ninimis (npm)
- Aug 19, 2022
Malicious code in ni5b (npm)
- Aug 19, 2022
Malicious code in neret (npm)
- Aug 19, 2022
Malicious code in ndeschledule (npm)
- Aug 19, 2022
Malicious code in nde4watch (npm)
- Aug 19, 2022
Malicious code in mugtimach (npm)
- Aug 19, 2022
Malicious code in msqsl (npm)
- Aug 19, 2022
Malicious code in motin (npm)
- Aug 19, 2022
Malicious code in mongobd (npm)
- Aug 19, 2022
Malicious code in momenttimezhone (npm)
- Aug 19, 2022
Malicious code in minicssextractpluin (npm)
- Aug 19, 2022
Malicious code in memoryzs (npm)
- Aug 19, 2022
Malicious code in mefthos (npm)
- Aug 19, 2022
Malware in odeforge
1 compromised version
- Aug 19, 2022
Malware in possnested
1 compromised version
- Aug 19, 2022
Malware in pgifo
1 compromised version
- Aug 19, 2022
Malware in odashthrottle
1 compromised version
- Aug 19, 2022
Malware in neret
1 compromised version
- Aug 19, 2022
Malware in minicssextractpluin
1 compromised version
- Aug 19, 2022
Malware in plginerro
1 compromised version
- Aug 19, 2022
Malware in optimiecssassetswebpackplugin
1 compromised version
- Aug 19, 2022
Malware in nodehass
1 compromised version
- Aug 19, 2022
Malware in motin
1 compromised version
- Aug 19, 2022
Malware in normaslizecss
1 compromised version
Page 6375 of 6,634