Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 11, 2022
Malware in kaufwgekdbotrcip
1 compromised version
- Jul 11, 2022
Malicious code in kaymsdxjpukotvhr (npm)
- Jul 11, 2022
Malware in kaymsdxjpukotvhr
1 compromised version
- Jul 11, 2022
Malicious code in kaqfvuxzhjmsecoy (npm)
- Jul 11, 2022
Malware in kaqfvuxzhjmsecoy
1 compromised version
- Jul 11, 2022
Malicious code in kcioagjbldwfqrkx (npm)
- Jul 11, 2022
Malware in kcioagjbldwfqrkx
1 compromised version
- Jul 11, 2022
Malicious code in kcupgbynzelovifq (npm)
- Jul 11, 2022
Malware in kcupgbynzelovifq
1 compromised version
- Jul 11, 2022
Malicious code in kejukosqlprdgfct (npm)
- Jul 11, 2022
Malicious code in kdcigmofhvsurayj (npm)
- Jul 11, 2022
Malware in kejukosqlprdgfct
1 compromised version
- Jul 11, 2022
Malware in kdcigmofhvsurayj
1 compromised version
- Jul 11, 2022
Malicious code in kcwytlienmodgjqa (npm)
- Jul 11, 2022
Malware in kcwytlienmodgjqa
1 compromised version
- Jul 11, 2022
Malicious code in kdghyalusmjenvpw (npm)
- Jul 11, 2022
Malware in kdghyalusmjenvpw
1 compromised version
- Jul 11, 2022
Malicious code in kejnbcskhqzixotu (npm)
- Jul 11, 2022
Malware in kejnbcskhqzixotu
1 compromised version
- Jul 11, 2022
Malicious code in kclohimunaygjrzb (npm)
- Jul 11, 2022
Malware in kclohimunaygjrzb
1 compromised version
- Jul 11, 2022
Malicious code in kdhvumyjkqfzctga (npm)
- Jul 11, 2022
Malware in kdhvumyjkqfzctga
1 compromised version
- Jul 11, 2022
Malicious code in fvogwyidkjsknezp (npm)
- Jul 11, 2022
Malware in fvogwyidkjsknezp
1 compromised version
- Jul 11, 2022
Malicious code in fwrvstaguqhzeloy (npm)
- Jul 11, 2022
Malware in fwrvstaguqhzeloy
1 compromised version
- Jul 11, 2022
Malicious code in cnqihwetjuapsgkb (npm)
- Jul 11, 2022
Malicious code in cmwbudvfkegjqpkh (npm)
- Jul 11, 2022
Malicious code in clmduxsyqkkjhbga (npm)
- Jul 11, 2022
Malware in cnqihwetjuapsgkb
1 compromised version
- Jul 11, 2022
Malware in clmduxsyqkkjhbga
1 compromised version
- Jul 11, 2022
Malware in cmwbudvfkegjqpkh
1 compromised version
- Jul 11, 2022
Malicious code in jczvngxsqaimyfek (npm)
- Jul 11, 2022
Malicious code in cnqdfkysegizxbjo (npm)
- Jul 11, 2022
Malware in cnqdfkysegizxbjo
1 compromised version
- Jul 11, 2022
Malware in jczvngxsqaimyfek
1 compromised version
- Jul 11, 2022
Malicious code in kltqesmdnvwuorhy (npm)
- Jul 11, 2022
Malicious code in kjadufvkoltqznib (npm)
- Jul 11, 2022
Malware in kltqesmdnvwuorhy
1 compromised version
- Jul 11, 2022
Malware in kjadufvkoltqznib
1 compromised version
- Jul 11, 2022
Malicious code in kmpaqjudkolgvszt (npm)
- Jul 11, 2022
Malicious code in kmcwtjlfiaznysxp (npm)
- Jul 11, 2022
Malware in kmpaqjudkolgvszt
1 compromised version
- Jul 11, 2022
Malware in kmcwtjlfiaznysxp
1 compromised version
- Jul 11, 2022
Malicious code in knbmshrxtlegfjkz (npm)
- Jul 11, 2022
Malware in knbmshrxtlegfjkz
1 compromised version
- Jul 11, 2022
Malicious code in kmalohjytrgiuwdb (npm)
- Jul 11, 2022
Malware in kmalohjytrgiuwdb
1 compromised version
- Jul 11, 2022
Malicious code in knmcyplreqkjbxdf (npm)
Page 6417 of 6,634