Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 11, 2022
Malicious code in kbxozjiervwstgyp (npm)
- Jul 11, 2022
Malware in kbxwekjsztqgiycl
1 compromised version
- Jul 11, 2022
Malware in kbxozjiervwstgyp
1 compromised version
- Jul 11, 2022
Malicious code in crgxpuhqnbijwvez (npm)
- Jul 11, 2022
Malware in crgxpuhqnbijwvez
1 compromised version
- Jul 11, 2022
Malicious code in crkhzsxyvimwtjbe (npm)
- Jul 11, 2022
Malware in crkhzsxyvimwtjbe
1 compromised version
- Jul 11, 2022
Malicious code in crkfjbkvwehmoitu (npm)
- Jul 11, 2022
Malware in crkfjbkvwehmoitu
1 compromised version
- Jul 11, 2022
Malicious code in cqbwogthvkuenakr (npm)
- Jul 11, 2022
Malware in cqbwogthvkuenakr
1 compromised version
- Jul 11, 2022
Malicious code in koczbjsvdleayurn (npm)
- Jul 11, 2022
Malware in koczbjsvdleayurn
1 compromised version
- Jul 11, 2022
Malicious code in koxfugjbrecnltsi (npm)
- Jul 11, 2022
Malicious code in jmesacrxunzwbyhl (npm)
- Jul 11, 2022
Malware in jmesacrxunzwbyhl
1 compromised version
- Jul 11, 2022
Malware in koxfugjbrecnltsi
1 compromised version
- Jul 11, 2022
Malicious code in lzqxodjrkbwhyuvf (npm)
- Jul 11, 2022
Malware in lzqxodjrkbwhyuvf
1 compromised version
- Jul 11, 2022
Malicious code in mafxwtkkojsyznei (npm)
- Jul 11, 2022
Malware in mafxwtkkojsyznei
1 compromised version
- Jul 11, 2022
Malicious code in nlzvbcyqseakmxoi (npm)
- Jul 11, 2022
Malicious code in msickkxpbuvalqrz (npm)
- Jul 11, 2022
Malicious code in mrvpdiuacjoweflq (npm)
- Jul 11, 2022
Malware in msickkxpbuvalqrz
1 compromised version
- Jul 11, 2022
Malware in nlzvbcyqseakmxoi
1 compromised version
- Jul 11, 2022
Malware in mrvpdiuacjoweflq
1 compromised version
- Jul 11, 2022
Malicious code in qczwaksngjpbehxt (npm)
- Jul 11, 2022
Malware in qczwaksngjpbehxt
1 compromised version
- Jul 11, 2022
Malicious code in nmbjqeshkdxzvoup (npm)
- Jul 11, 2022
Malware in nmbjqeshkdxzvoup
1 compromised version
- Jul 11, 2022
Malicious code in rfqdgvcjnaeuwzxs (npm)
- Jul 11, 2022
Malicious code in rdtkfuhjacoezmwn (npm)
- Jul 11, 2022
Malware in rfqdgvcjnaeuwzxs
1 compromised version
- Jul 11, 2022
Malware in rdtkfuhjacoezmwn
1 compromised version
- Jul 11, 2022
Malicious code in rvbxthpadlowmfji (npm)
- Jul 11, 2022
Malicious code in rlhjypbkxqmzwtak (npm)
- Jul 11, 2022
Malicious code in rkyinqawlpfdgbvc (npm)
- Jul 11, 2022
Malware in rkyinqawlpfdgbvc
1 compromised version
- Jul 11, 2022
Malware in rlhjypbkxqmzwtak
1 compromised version
- Jul 11, 2022
Malware in rvbxthpadlowmfji
1 compromised version
- Jul 11, 2022
Malicious code in rzltkhpoanubgimk (npm)
- Jul 11, 2022
Malicious code in ryxdemsinpwqzujo (npm)
- Jul 11, 2022
Malware in rzltkhpoanubgimk
1 compromised version
- Jul 11, 2022
Malware in ryxdemsinpwqzujo
1 compromised version
- Jul 11, 2022
Malicious code in rzwdkpokcixvuyet (npm)
- Jul 11, 2022
Malware in rzwdkpokcixvuyet
1 compromised version
- Jul 11, 2022
Malicious code in sainzpgwflumkdbc (npm)
- Jul 11, 2022
Malware in sainzpgwflumkdbc
1 compromised version
- Jul 11, 2022
Malicious code in sbtydhovriufmpqx (npm)
Page 6420 of 6,634