Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 11, 2022
Malicious code in diqcbaxzhtnsplfj (npm)
- Jul 11, 2022
Malicious code in cthipjznlgrwqysa (npm)
- Jul 11, 2022
Malicious code in bvnqfwugmzyrkhol (npm)
- Jul 11, 2022
Malware in jtuiwqgmxkhyvecp
1 compromised version
- Jul 11, 2022
Malware in ushqiwbcxlevakrd
1 compromised version
- Jul 11, 2022
Malware in epszkyqktamihwbr
1 compromised version
- Jul 11, 2022
Malware in odgikqtuwcmvhpzn
1 compromised version
- Jul 11, 2022
Malware in komkgqhnwtauvfys
1 compromised version
- Jul 11, 2022
Malware in uwjoekgxmlhrzsaq
1 compromised version
- Jul 11, 2022
Malware in bvnqfwugmzyrkhol
1 compromised version
- Jul 11, 2022
Malware in kvxaghikpucnldso
1 compromised version
- Jul 11, 2022
Malware in lszjdvtfxkiekbga
1 compromised version
- Jul 11, 2022
Malware in qzcomabjsvtgrkyx
1 compromised version
- Jul 11, 2022
Malware in pflgydevkbxamquw
1 compromised version
- Jul 11, 2022
Malware in vgbewykauqtxfhmi
1 compromised version
- Jul 11, 2022
Malware in ljtmycbiqukesnhg
1 compromised version
- Jul 11, 2022
Malware in tikrzbhncwvlmfgu
1 compromised version
- Jul 11, 2022
Malware in hjtdfypiocxwelkb
1 compromised version
- Jul 11, 2022
Malware in diqcbaxzhtnsplfj
1 compromised version
- Jul 11, 2022
Malware in eokpshjadwucgytr
1 compromised version
- Jul 11, 2022
Malware in cthipjznlgrwqysa
1 compromised version
- Jul 11, 2022
Malware in ygckxjnkwbemqval
1 compromised version
- Jul 11, 2022
Malware in ixvgbjzhpnalscut
1 compromised version
- Jul 11, 2022
Malicious code in yplijosmvagwfcku (npm)
- Jul 11, 2022
Malware in yplijosmvagwfcku
1 compromised version
- Jul 11, 2022
Malicious code in qxnmwkualkprdbtj (npm)
- Jul 11, 2022
Malware in qxnmwkualkprdbtj
1 compromised version
- Jul 11, 2022
Malicious code in wkpbyuamcqjrkefd (npm)
- Jul 11, 2022
Malicious code in svgjquyfeinbxrpl (npm)
- Jul 11, 2022
Malicious code in hretokxbpwuilnck (npm)
- Jul 11, 2022
Malicious code in dykesimovtpafwxq (npm)
- Jul 11, 2022
Malware in wkpbyuamcqjrkefd
1 compromised version
- Jul 11, 2022
Malware in svgjquyfeinbxrpl
1 compromised version
- Jul 11, 2022
Malware in dykesimovtpafwxq
1 compromised version
- Jul 11, 2022
Malware in hretokxbpwuilnck
1 compromised version
- Jul 11, 2022
Malicious code in klomsfbeixcrwuhn (npm)
- Jul 11, 2022
Malware in klomsfbeixcrwuhn
1 compromised version
- Jul 11, 2022
Malicious code in akrniehzkyqvcwum (npm)
- Jul 11, 2022
Malicious code in ufhgxvwybjiltpzs (npm)
- Jul 11, 2022
Malicious code in siytlnkdhzkjfevo (npm)
- Jul 11, 2022
Malware in akrniehzkyqvcwum
1 compromised version
- Jul 11, 2022
Malware in siytlnkdhzkjfevo
1 compromised version
- Jul 11, 2022
Malware in ufhgxvwybjiltpzs
1 compromised version
- Jul 11, 2022
Malicious code in xowtslzpndvkfrgk (npm)
- Jul 11, 2022
Malware in xowtslzpndvkfrgk
1 compromised version
- Jul 11, 2022
Malicious code in jvgmepykdwfrqali (npm)
- Jul 11, 2022
Malware in jvgmepykdwfrqali
1 compromised version
- Jul 11, 2022
Malicious code in zagqckhvirtmwfun (npm)
- Jul 11, 2022
Malicious code in uqngboakhrfmwxvl (npm)
- Jul 11, 2022
Malware in zagqckhvirtmwfun
1 compromised version
Page 6411 of 6,634