Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 11, 2022
Malware in knmcyplreqkjbxdf
1 compromised version
- Jul 11, 2022
Malicious code in kmauqkvxzsgifpbj (npm)
- Jul 11, 2022
Malware in kmauqkvxzsgifpbj
1 compromised version
- Jul 11, 2022
Malicious code in isxgfzjartdehuoy (npm)
- Jul 11, 2022
Malware in isxgfzjartdehuoy
1 compromised version
- Jul 11, 2022
Malicious code in knmkyipgcltveqdj (npm)
- Jul 11, 2022
Malicious code in kmnxptuwdkeflbyh (npm)
- Jul 11, 2022
Malware in knmkyipgcltveqdj
1 compromised version
- Jul 11, 2022
Malware in kmnxptuwdkeflbyh
1 compromised version
- Jul 11, 2022
Malicious code in isvyfkbxhnjmzakg (npm)
- Jul 11, 2022
Malware in isvyfkbxhnjmzakg
1 compromised version
- Jul 11, 2022
Malicious code in ipxksnruvewdzbgm (npm)
- Jul 11, 2022
Malware in ipxksnruvewdzbgm
1 compromised version
- Jul 11, 2022
Malicious code in iqlomfvagyepxjks (npm)
- Jul 11, 2022
Malicious code in ipflgakorvnytcmz (npm)
- Jul 11, 2022
Malware in iqlomfvagyepxjks
1 compromised version
- Jul 11, 2022
Malware in ipflgakorvnytcmz
1 compromised version
- Jul 11, 2022
Malicious code in izhvuecdkrowmyat (npm)
- Jul 11, 2022
Malware in izhvuecdkrowmyat
1 compromised version
- Jul 11, 2022
Malicious code in imqpkrguwxctshbz (npm)
- Jul 11, 2022
Malware in imqpkrguwxctshbz
1 compromised version
- Jul 11, 2022
Malicious code in mcqnyxijgtedrbfz (npm)
- Jul 11, 2022
Malware in mcqnyxijgtedrbfz
1 compromised version
- Jul 11, 2022
Malicious code in mbtjopkefcugxhrk (npm)
- Jul 11, 2022
Malware in mbtjopkefcugxhrk
1 compromised version
- Jul 11, 2022
Malicious code in kscoxealkrnbywjd (npm)
- Jul 11, 2022
Malicious code in kpsbwogicxvtfqur (npm)
- Jul 11, 2022
Malware in kscoxealkrnbywjd
1 compromised version
- Jul 11, 2022
Malware in kpsbwogicxvtfqur
1 compromised version
- Jul 11, 2022
Malicious code in kpabiqmynvxezwcr (npm)
- Jul 11, 2022
Malware in kpabiqmynvxezwcr
1 compromised version
- Jul 11, 2022
Malicious code in kswazcvhukygtfjd (npm)
- Jul 11, 2022
Malware in kswazcvhukygtfjd
1 compromised version
- Jul 11, 2022
Malicious code in kwoucxdemjhifklg (npm)
- Jul 11, 2022
Malicious code in kpqrynfjhmukowct (npm)
- Jul 11, 2022
Malware in kwoucxdemjhifklg
1 compromised version
- Jul 11, 2022
Malware in kpqrynfjhmukowct
1 compromised version
- Jul 11, 2022
Malicious code in krmlpgntjfvesahi (npm)
- Jul 11, 2022
Malware in krmlpgntjfvesahi
1 compromised version
- Jul 11, 2022
Malicious code in kspmycbjraevliwn (npm)
- Jul 11, 2022
Malware in kspmycbjraevliwn
1 compromised version
- Jul 11, 2022
Malicious code in ksfkyvnlzejibumq (npm)
- Jul 11, 2022
Malware in ksfkyvnlzejibumq
1 compromised version
- Jul 11, 2022
Malicious code in kslwiaxnkdfyqvpm (npm)
- Jul 11, 2022
Malicious code in krgwhdbniscqjptu (npm)
- Jul 11, 2022
Malware in krgwhdbniscqjptu
1 compromised version
- Jul 11, 2022
Malware in kslwiaxnkdfyqvpm
1 compromised version
- Jul 11, 2022
Malicious code in htqsoapimkbjnvlk (npm)
- Jul 11, 2022
Malicious code in hgvrmwikcsnptaxq (npm)
- Jul 11, 2022
Malware in hgvrmwikcsnptaxq
1 compromised version
Page 6418 of 6,634