Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 12, 2022
Malware in @roborox_int/elk-logger
1 compromised version
- Jul 12, 2022
Malicious code in @vividcortex/multiplexer (npm)
- Jul 12, 2022
Malware in @vividcortex/multiplexer
1 compromised version
- Jul 12, 2022
Malicious code in amount-normalizer (npm)
- Jul 12, 2022
Malware in amount-normalizer
1 compromised version
- Jul 12, 2022
Malicious code in ugentec-framework-angular (npm)
- Jul 12, 2022
Malware in ugentec-framework-angular
1 compromised version
- Jul 12, 2022
Malicious code in xedvhtkmspgzwkfy (npm)
- Jul 12, 2022
Malware in xedvhtkmspgzwkfy
1 compromised version
- Jul 12, 2022
Malicious code in wjakcgsxftuyhbir (npm)
- Jul 12, 2022
Malware in wjakcgsxftuyhbir
1 compromised version
- Jul 12, 2022
Malicious code in ckvmqjksghytofel (npm)
- Jul 12, 2022
Malware in ckvmqjksghytofel
1 compromised version
- Jul 12, 2022
Malicious code in xlhepkvdnjmyaruo (npm)
- Jul 12, 2022
Malicious code in cywzlrmkeafidvso (npm)
- Jul 12, 2022
Malicious code in axevqmjtkunplhir (npm)
- Jul 12, 2022
Malware in axevqmjtkunplhir
1 compromised version
- Jul 12, 2022
Malware in xlhepkvdnjmyaruo
1 compromised version
- Jul 12, 2022
Malware in cywzlrmkeafidvso
1 compromised version
- Jul 12, 2022
Malicious code in xhnedzawcukgpfjv (npm)
- Jul 12, 2022
Malware in xhnedzawcukgpfjv
1 compromised version
- Jul 12, 2022
Malicious code in vkwzriqpsabdfhnc (npm)
- Jul 12, 2022
Malicious code in spkndrbxkzghiyqf (npm)
- Jul 12, 2022
Malicious code in ruzkcploymjdibah (npm)
- Jul 12, 2022
Malware in spkndrbxkzghiyqf
1 compromised version
- Jul 12, 2022
Malware in ruzkcploymjdibah
1 compromised version
- Jul 12, 2022
Malware in vkwzriqpsabdfhnc
1 compromised version
- Jul 12, 2022
Malicious code in nxvjhmdetwglsfry (npm)
- Jul 12, 2022
Malware in nxvjhmdetwglsfry
1 compromised version
- Jul 12, 2022
Malicious code in hnyzaklqkgmobdcv (npm)
- Jul 12, 2022
Malware in hnyzaklqkgmobdcv
1 compromised version
- Jul 12, 2022
Malicious code in gumhecwixzkqfkbs (npm)
- Jul 12, 2022
Malware in gumhecwixzkqfkbs
1 compromised version
- Jul 12, 2022
Malicious code in zjdkvqcxmknipaye (npm)
- Jul 12, 2022
Malware in zjdkvqcxmknipaye
1 compromised version
- Jul 12, 2022
Malicious code in qemixknbaocwkful (npm)
- Jul 12, 2022
Malware in qemixknbaocwkful
1 compromised version
- Jul 12, 2022
Malicious code in ruldhziaxpmvgtck (npm)
- Jul 12, 2022
Malware in ruldhziaxpmvgtck
1 compromised version
- Jul 12, 2022
Malicious code in sfhrydzmeajqvkwi (npm)
- Jul 12, 2022
Malware in sfhrydzmeajqvkwi
1 compromised version
- Jul 12, 2022
Malicious code in lkauovkgjbridwhy (npm)
- Jul 12, 2022
Malware in lkauovkgjbridwhy
1 compromised version
- Jul 12, 2022
Malicious code in gumcqskhearbotpz (npm)
- Jul 12, 2022
Malware in gumcqskhearbotpz
1 compromised version
- Jul 12, 2022
Malicious code in xvpasfokuljqzhki (npm)
- Jul 12, 2022
Malware in xvpasfokuljqzhki
1 compromised version
- Jul 12, 2022
Malicious code in @igraal/web-design-system (npm)
- Jul 12, 2022
Malware in @igraal/web-design-system
1 compromised version
- Jul 12, 2022
Malicious code in bc-image-loader (npm)
Page 6408 of 6,634