Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 12, 2022
Malware in bc-image-loader
1 compromised version
- Jul 11, 2022
Malicious code in rdfqkklocipwutze (npm)
- Jul 11, 2022
Malware in rdfqkklocipwutze
1 compromised version
- Jul 11, 2022
Malicious code in eazyminer-fsdjufhsdjf (npm)
- Jul 11, 2022
Malware in eazyminer-fsdjufhsdjf
1 compromised version
- Jul 11, 2022
Malicious code in pasirntlfhxmywcg (npm)
- Jul 11, 2022
Malware in pasirntlfhxmywcg
1 compromised version
- Jul 11, 2022
Malicious code in qnslihcvgrbtjedy (npm)
- Jul 11, 2022
Malware in qnslihcvgrbtjedy
1 compromised version
- Jul 11, 2022
Malicious code in vhustlcfimgkwyzq (npm)
- Jul 11, 2022
Malware in vhustlcfimgkwyzq
1 compromised version
- Jul 11, 2022
Malicious code in donjhcqfeapzbrwk (npm)
- Jul 11, 2022
Malware in donjhcqfeapzbrwk
1 compromised version
- Jul 11, 2022
Malicious code in ainruohkpglvwsmj (npm)
- Jul 11, 2022
Malicious code in nmgpvbyzeufscxjh (npm)
- Jul 11, 2022
Malware in ainruohkpglvwsmj
1 compromised version
- Jul 11, 2022
Malware in nmgpvbyzeufscxjh
1 compromised version
- Jul 11, 2022
Malicious code in cnkqebharvwztkgp (npm)
- Jul 11, 2022
Malware in cnkqebharvwztkgp
1 compromised version
- Jul 11, 2022
Malicious code in rfjuqaiomzcdgxtv (npm)
- Jul 11, 2022
Malware in rfjuqaiomzcdgxtv
1 compromised version
- Jul 11, 2022
Malicious code in lnuhfadctpvbwrsj (npm)
- Jul 11, 2022
Malware in lnuhfadctpvbwrsj
1 compromised version
- Jul 11, 2022
Malicious code in rphzfwtcqgidmank (npm)
- Jul 11, 2022
Malware in rphzfwtcqgidmank
1 compromised version
- Jul 11, 2022
Malicious code in yeacjwvlotzixpuh (npm)
- Jul 11, 2022
Malicious code in xshvczomkjpwyalf (npm)
- Jul 11, 2022
Malicious code in fcskuqoiemhdkwra (npm)
- Jul 11, 2022
Malware in xshvczomkjpwyalf
1 compromised version
- Jul 11, 2022
Malware in yeacjwvlotzixpuh
1 compromised version
- Jul 11, 2022
Malware in fcskuqoiemhdkwra
1 compromised version
- Jul 11, 2022
Malicious code in kqptcsuxewfkmazi (npm)
- Jul 11, 2022
Malware in kqptcsuxewfkmazi
1 compromised version
- Jul 11, 2022
Malicious code in srikduvzqlmwcotg (npm)
- Jul 11, 2022
Malware in srikduvzqlmwcotg
1 compromised version
- Jul 11, 2022
Malicious code in nkyuwzdtlximpejq (npm)
- Jul 11, 2022
Malware in nkyuwzdtlximpejq
1 compromised version
- Jul 11, 2022
Malicious code in gemcqukvlhfntxjs (npm)
- Jul 11, 2022
Malware in gemcqukvlhfntxjs
1 compromised version
- Jul 11, 2022
Malicious code in vzyfxaumldnesjor (npm)
- Jul 11, 2022
Malicious code in hdgktiuoszpelaxq (npm)
- Jul 11, 2022
Malicious code in cfbmoklknehgzjts (npm)
- Jul 11, 2022
Malware in vzyfxaumldnesjor
1 compromised version
- Jul 11, 2022
Malware in hdgktiuoszpelaxq
1 compromised version
- Jul 11, 2022
Malware in cfbmoklknehgzjts
1 compromised version
- Jul 11, 2022
Malicious code in fqmslpwnjihvuacd (npm)
- Jul 11, 2022
Malware in fqmslpwnjihvuacd
1 compromised version
- Jul 11, 2022
Malicious code in umqvjsxdkchroifn (npm)
- Jul 11, 2022
Malware in umqvjsxdkchroifn
1 compromised version
- Jul 11, 2022
Malicious code in jayqwipzmrogfklh (npm)
Page 6409 of 6,634