Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 11, 2022
Malicious code in bcztpuiojndlhmvx (npm)
- Jul 11, 2022
Malicious code in bancmxqetuhvglwd (npm)
- Jul 11, 2022
Malware in bancmxqetuhvglwd
1 compromised version
- Jul 11, 2022
Malware in bcztpuiojndlhmvx
1 compromised version
- Jul 11, 2022
Malware in smfjcvkwqbigrpkt
1 compromised version
- Jul 11, 2022
Malicious code in abenoypgxdqlmkwk (npm)
- Jul 11, 2022
Malicious code in tsgohznadkjfcymr (npm)
- Jul 11, 2022
Malware in abenoypgxdqlmkwk
1 compromised version
- Jul 11, 2022
Malware in tsgohznadkjfcymr
1 compromised version
- Jul 11, 2022
Malicious code in jhyzkumqikexvcop (npm)
- Jul 11, 2022
Malware in jhyzkumqikexvcop
1 compromised version
- Jul 11, 2022
Malicious code in uibrqzjpknsdvyfw (npm)
- Jul 11, 2022
Malware in uibrqzjpknsdvyfw
1 compromised version
- Jul 11, 2022
Malicious code in hvskzgtdmjqaoukx (npm)
- Jul 11, 2022
Malware in hvskzgtdmjqaoukx
1 compromised version
- Jul 11, 2022
Malicious code in glqokkcbpdirtxme (npm)
- Jul 11, 2022
Malware in glqokkcbpdirtxme
1 compromised version
- Jul 11, 2022
Malicious code in ohwczbeuslaxvpmd (npm)
- Jul 11, 2022
Malicious code in lxqrwcnvsgkbjfuo (npm)
- Jul 11, 2022
Malicious code in kaojezutnfyrgkwv (npm)
- Jul 11, 2022
Malware in lxqrwcnvsgkbjfuo
1 compromised version
- Jul 11, 2022
Malware in ohwczbeuslaxvpmd
1 compromised version
- Jul 11, 2022
Malware in kaojezutnfyrgkwv
1 compromised version
- Jul 11, 2022
Malicious code in loaypexrnbszqvjh (npm)
- Jul 11, 2022
Malware in loaypexrnbszqvjh
1 compromised version
- Jul 11, 2022
Malicious code in nkurkbscyphxzawt (npm)
- Jul 11, 2022
Malware in nkurkbscyphxzawt
1 compromised version
- Jul 11, 2022
Malicious code in oktcpwyrzkhdsgnx (npm)
- Jul 11, 2022
Malware in oktcpwyrzkhdsgnx
1 compromised version
- Jul 11, 2022
Malicious code in cnvofxjbmikwrlkh (npm)
- Jul 11, 2022
Malware in cnvofxjbmikwrlkh
1 compromised version
- Jul 11, 2022
Malicious code in otcpndfkwijlhesu (npm)
- Jul 11, 2022
Malicious code in eykqsbrzawtghvui (npm)
- Jul 11, 2022
Malware in eykqsbrzawtghvui
1 compromised version
- Jul 11, 2022
Malware in otcpndfkwijlhesu
1 compromised version
- Jul 11, 2022
Malicious code in zmodfqbpcyijkten (npm)
- Jul 11, 2022
Malicious code in tkogyxdcurwhfain (npm)
- Jul 11, 2022
Malware in zmodfqbpcyijkten
1 compromised version
- Jul 11, 2022
Malware in tkogyxdcurwhfain
1 compromised version
- Jul 11, 2022
Malicious code in gvcpxzyaohifketl (npm)
- Jul 11, 2022
Malware in gvcpxzyaohifketl
1 compromised version
- Jul 11, 2022
Malicious code in qkwyeczvxstmabjn (npm)
- Jul 11, 2022
Malware in qkwyeczvxstmabjn
1 compromised version
- Jul 11, 2022
Malicious code in zevkstacmkonlfdu (npm)
- Jul 11, 2022
Malware in zevkstacmkonlfdu
1 compromised version
- Jul 11, 2022
Malicious code in jszxcgeobiqvnhlm (npm)
- Jul 11, 2022
Malware in jszxcgeobiqvnhlm
1 compromised version
- Jul 11, 2022
Malicious code in ylropkmdjbvxiekt (npm)
- Jul 11, 2022
Malware in ylropkmdjbvxiekt
1 compromised version
- Jul 11, 2022
Malicious code in uigkvhamsfcyobxt (npm)
Page 6413 of 6,634