Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malware in kioamout
1 compromised version
- Aug 19, 2022
Malware in isnon
1 compromised version
- Aug 19, 2022
Malware in lodasfhmap
1 compromised version
- Aug 19, 2022
Malware in joek
1 compromised version
- Aug 19, 2022
Malware in lzdashuniq
1 compromised version
- Aug 19, 2022
Malware in karmaajsmins
1 compromised version
- Aug 19, 2022
Malware in ivea
1 compromised version
- Aug 19, 2022
Malware in mejj
1 compromised version
- Aug 19, 2022
Malware in jtpnpresolver
1 compromised version
- Aug 19, 2022
Malware in lodashdkbounce
1 compromised version
- Aug 19, 2022
Malware in laglget
1 compromised version
- Aug 19, 2022
Malware in karmaphantomjlauncher
1 compromised version
- Aug 19, 2022
Malware in knodeexte3nd
1 compromised version
- Aug 19, 2022
Malware in litelemdent
1 compromised version
- Aug 19, 2022
Malware in jo5
1 compromised version
- Aug 19, 2022
Malware in inquirerautocompletebprompt
1 compromised version
- Aug 19, 2022
Malware in lodashisfuncion
1 compromised version
- Aug 19, 2022
Malware in jsouile
1 compromised version
- Aug 19, 2022
Malware in loaashmcrge
1 compromised version
- Aug 19, 2022
Malware in ionvlite
1 compromised version
- Aug 19, 2022
Malware in lodashclonqedeew
1 compromised version
- Aug 19, 2022
Malware in jsonstsream
1 compromised version
- Aug 19, 2022
Malware in loashpbick
1 compromised version
- Aug 19, 2022
Malware in mcha
1 compromised version
- Aug 19, 2022
Malware in jsmene
1 compromised version
- Aug 19, 2022
Malware in jwtdecope
1 compromised version
- Aug 19, 2022
Malware in makkelsdir
1 compromised version
- Aug 19, 2022
Malware in istannl
1 compromised version
- Aug 19, 2022
Malware in isplaivnobject
1 compromised version
- Aug 19, 2022
Malware in jasminecor
1 compromised version
- Aug 19, 2022
Malware in lodashflten
1 compromised version
- Aug 19, 2022
Malware in miem
1 compromised version
- Aug 19, 2022
Malware in logl8v
1 compromised version
- Aug 19, 2022
Malware in isextrt
1 compromised version
- Aug 19, 2022
Malware in lorash3fset
1 compromised version
- Aug 19, 2022
Malware in koacompocse
1 compromised version
- Aug 19, 2022
Malware in lodasqhcamelcase
1 compromised version
- Aug 19, 2022
Malware in mimetyps
1 compromised version
- Aug 19, 2022
Malware in jja4de
1 compromised version
- Aug 19, 2022
Malware in levl
1 compromised version
- Aug 19, 2022
Malware in metalmi
1 compromised version
- Aug 19, 2022
Malware in lrucacee
1 compromised version
- Aug 19, 2022
Malware in m5d
1 compromised version
- Aug 19, 2022
Malware in lodashisemuty
1 compromised version
- Aug 19, 2022
Malware in markdowvnit
1 compromised version
- Aug 19, 2022
Malware in jestreolv
1 compromised version
- Aug 19, 2022
Malware in lodashisobjct
1 compromised version
- Aug 19, 2022
Malware in lokdashtemplate
1 compromised version
- Aug 19, 2022
Malware in lodashassig
1 compromised version
- Aug 19, 2022
Malware in mat6rialui
1 compromised version
Page 6379 of 6,634