Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malware in karmachromelauncer
1 compromised version
- Aug 19, 2022
Malware in lodaschisstring
1 compromised version
- Aug 19, 2022
Malware in koabodparser
1 compromised version
- Aug 19, 2022
Malware in lementui
1 compromised version
- Aug 19, 2022
Malware in mdfile
1 compromised version
- Aug 19, 2022
Malware in isomorphceftch
1 compromised version
- Aug 19, 2022
Malware in kapollolink
1 compromised version
- Aug 19, 2022
Malware in jsase64
1 compromised version
- Aug 19, 2022
Malware in isprgomise
1 compromised version
- Aug 19, 2022
Malware in lessoader
1 compromised version
- Aug 19, 2022
Malware in lodashfroeach
1 compromised version
- Aug 19, 2022
Malicious code in ioderits (npm)
- Aug 19, 2022
Malicious code in inxi (npm)
- Aug 19, 2022
Malicious code in invariqaot (npm)
- Aug 19, 2022
Malicious code in infyl (npm)
- Aug 19, 2022
Malicious code in immutoabilityhelper (npm)
- Aug 19, 2022
Malicious code in imagemu8 (npm)
- Aug 19, 2022
Malicious code in ihghland (npm)
- Aug 19, 2022
Malicious code in ierbase (npm)
- Aug 19, 2022
Malicious code in idejtityobjproxy (npm)
- Aug 19, 2022
Malicious code in hutpproxymiddleware (npm)
- Aug 19, 2022
Malicious code in husy (npm)
- Aug 19, 2022
Malicious code in httrperrors (npm)
- Aug 19, 2022
Malicious code in httpstatuscoxes (npm)
- Aug 19, 2022
Malicious code in httpsrver (npm)
- Aug 19, 2022
Malicious code in httpproxyagnc (npm)
- Aug 19, 2022
Malicious code in httppoy (npm)
- Aug 19, 2022
Malicious code in htmlwebpacplulin (npm)
- Aug 19, 2022
Malicious code in htmlpjader (npm)
- Aug 19, 2022
Malicious code in htmlminifire (npm)
- Aug 19, 2022
Malicious code in htlparsevr2 (npm)
- Aug 19, 2022
Malicious code in hpathexists (npm)
- Aug 19, 2022
Malicious code in hoistnonjreactstatics (npm)
- Aug 19, 2022
Malicious code in hogajnjs (npm)
- Aug 19, 2022
Malicious code in hlk (npm)
- Aug 19, 2022
Malicious code in hjsbesutify (npm)
- Aug 19, 2022
Malicious code in hixletpaiprs (npm)
- Aug 19, 2022
Malicious code in hirdeis (npm)
- Aug 19, 2022
Malicious code in hintstaged (npm)
- Aug 19, 2022
Malicious code in highlighjtjs (npm)
- Aug 19, 2022
Malicious code in hhuen (npm)
- Aug 19, 2022
Malicious code in hfilesa3ver (npm)
- Aug 19, 2022
Malicious code in heflectmetadata (npm)
- Aug 19, 2022
Malicious code in hashsu7m (npm)
- Aug 19, 2022
Malicious code in hapollocaheinmemory (npm)
- Aug 19, 2022
Malicious code in h6mlentiies (npm)
- Aug 19, 2022
Malicious code in gzpixizu (npm)
- Aug 19, 2022
Malicious code in guzpless (npm)
- Aug 19, 2022
Malicious code in gurbpautroprefixer (npm)
- Aug 19, 2022
Malicious code in gupnotify (npm)
Page 6380 of 6,634