Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 11, 2022
Malware in ojqmdtzpguxshkeb
1 compromised version
- Jul 11, 2022
Malicious code in obeuwjnkzpfrqmhs (npm)
- Jul 11, 2022
Malware in obeuwjnkzpfrqmhs
1 compromised version
- Jul 11, 2022
Malicious code in pgovlicdntbzhskr (npm)
- Jul 11, 2022
Malware in pgovlicdntbzhskr
1 compromised version
- Jul 11, 2022
Malicious code in phceosgzqlrmbxdk (npm)
- Jul 11, 2022
Malicious code in pguzvbahliyfwejk (npm)
- Jul 11, 2022
Malicious code in pgrcizmyxjbefkut (npm)
- Jul 11, 2022
Malware in pgrcizmyxjbefkut
1 compromised version
- Jul 11, 2022
Malware in phceosgzqlrmbxdk
1 compromised version
- Jul 11, 2022
Malware in pguzvbahliyfwejk
1 compromised version
- Jul 11, 2022
Malicious code in pawnftubxjcsiklv (npm)
- Jul 11, 2022
Malicious code in patqykhxwrmnkuec (npm)
- Jul 11, 2022
Malware in patqykhxwrmnkuec
1 compromised version
- Jul 11, 2022
Malware in pawnftubxjcsiklv
1 compromised version
- Jul 11, 2022
Malicious code in pksrxkyftmbwuozn (npm)
- Jul 11, 2022
Malware in pksrxkyftmbwuozn
1 compromised version
- Jul 11, 2022
Malicious code in pagneokkbhqimzju (npm)
- Jul 11, 2022
Malware in pagneokkbhqimzju
1 compromised version
- Jul 11, 2022
Malicious code in pqnlgmtdifawekzu (npm)
- Jul 11, 2022
Malicious code in pkvqlrgfbyxehwka (npm)
- Jul 11, 2022
Malware in pkvqlrgfbyxehwka
1 compromised version
- Jul 11, 2022
Malware in pqnlgmtdifawekzu
1 compromised version
- Jul 11, 2022
Malicious code in polyxqkizwcbvjkm (npm)
- Jul 11, 2022
Malicious code in pofrtiuqdnbvzkwx (npm)
- Jul 11, 2022
Malware in pofrtiuqdnbvzkwx
1 compromised version
- Jul 11, 2022
Malware in polyxqkizwcbvjkm
1 compromised version
- Jul 11, 2022
Malicious code in pndjuobrqtvlasgz (npm)
- Jul 11, 2022
Malware in pndjuobrqtvlasgz
1 compromised version
- Jul 11, 2022
Malicious code in pndchbzqorulakxe (npm)
- Jul 11, 2022
Malware in pndchbzqorulakxe
1 compromised version
- Jul 11, 2022
Malicious code in plnreqzvyfbhkwxk (npm)
- Jul 11, 2022
Malicious code in plfkweujctyqhdzb (npm)
- Jul 11, 2022
Malware in plnreqzvyfbhkwxk
1 compromised version
- Jul 11, 2022
Malware in plfkweujctyqhdzb
1 compromised version
- Jul 11, 2022
Malicious code in pmohswjydfextqai (npm)
- Jul 11, 2022
Malware in pmohswjydfextqai
1 compromised version
- Jul 11, 2022
Malicious code in jsqaboglpwciumvz (npm)
- Jul 11, 2022
Malware in jsqaboglpwciumvz
1 compromised version
- Jul 11, 2022
Malicious code in pntovlwumqkzryai (npm)
- Jul 11, 2022
Malware in pntovlwumqkzryai
1 compromised version
- Jul 11, 2022
Malicious code in ptowankmgrdxcbzj (npm)
- Jul 11, 2022
Malware in ptowankmgrdxcbzj
1 compromised version
- Jul 11, 2022
Malicious code in lcrfjkhmieyoxwaq (npm)
- Jul 11, 2022
Malware in lcrfjkhmieyoxwaq
1 compromised version
- Jul 11, 2022
Malicious code in lcvaedgqzyujtxkb (npm)
- Jul 11, 2022
Malware in lcvaedgqzyujtxkb
1 compromised version
- Jul 11, 2022
Malicious code in kasiklgeyhbvfrzu (npm)
- Jul 11, 2022
Malware in kasiklgeyhbvfrzu
1 compromised version
- Jul 11, 2022
Malicious code in kaufwgekdbotrcip (npm)
Page 6416 of 6,634