Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malicious code in osa-tool (npm)
- Jun 20, 2022
Malicious code in mocha-junit-reporters-2 (npm)
- Jun 20, 2022
Malicious code in calc_85n2frdx2j (npm)
- Jun 20, 2022
Malware in scheduler-0-13
1 compromised version
- Jun 20, 2022
Malware in calc_85n2frdx2j
1 compromised version
- Jun 20, 2022
Malware in osa-tool
1 compromised version
- Jun 20, 2022
Malware in mocha-junit-reporters-2
1 compromised version
- Jun 20, 2022
Malicious code in rawspec (npm)
- Jun 20, 2022
Malicious code in ethereum-abi (npm)
- Jun 20, 2022
Malicious code in calc_ucadidayug (npm)
- Jun 20, 2022
Malicious code in calc_rsrj6q3yhl (npm)
- Jun 20, 2022
Malware in calc_ucadidayug
1 compromised version
- Jun 20, 2022
Malware in calc_rsrj6q3yhl
1 compromised version
- Jun 20, 2022
Malware in ethereum-abi
1 compromised version
- Jun 20, 2022
Malware in rawspec
1 compromised version
- Jun 20, 2022
Malicious code in resize-observe (npm)
- Jun 20, 2022
Malicious code in pakistan_hsudoaps (npm)
- Jun 20, 2022
Malicious code in ohbhee (npm)
- Jun 20, 2022
Malicious code in lint-staged-var (npm)
- Jun 20, 2022
Malicious code in jhoolay (npm)
- Jun 20, 2022
Malware in pakistan_hsudoaps
1 compromised version
- Jun 20, 2022
Malware in resize-observe
1 compromised version
- Jun 20, 2022
Malware in jhoolay
1 compromised version
- Jun 20, 2022
Malware in ohbhee
1 compromised version
- Jun 20, 2022
Malware in lint-staged-var
1 compromised version
- Jun 20, 2022
Malicious code in strip-umer (npm)
- Jun 20, 2022
Malicious code in d1tm3nemodark (npm)
- Jun 20, 2022
Malicious code in calc-n3mo-69 (npm)
- Jun 20, 2022
Malware in calc-n3mo-69
1 compromised version
- Jun 20, 2022
Malware in d1tm3nemodark
1 compromised version
- Jun 20, 2022
Malware in strip-umer
1 compromised version
- Jun 20, 2022
Malicious code in calc_ph6avsgeed (npm)
- Jun 20, 2022
Malicious code in calc_ordnk0bfou (npm)
- Jun 20, 2022
Malicious code in calc_m4nr0eonhd (npm)
- Jun 20, 2022
Malicious code in calc_9p1qriho8q (npm)
- Jun 20, 2022
Malware in calc_9p1qriho8q
1 compromised version
- Jun 20, 2022
Malware in calc_m4nr0eonhd
1 compromised version
- Jun 20, 2022
Malware in calc_ordnk0bfou
1 compromised version
- Jun 20, 2022
Malware in calc_ph6avsgeed
1 compromised version
- Jun 20, 2022
Malicious code in internal_pkg_for_verd (npm)
- Jun 20, 2022
Malicious code in internal_org_dependency (npm)
- Jun 20, 2022
Malicious code in calc_tj7r6uk4vf (npm)
- Jun 20, 2022
Malicious code in calc_fh2qxzsj7s (npm)
- Jun 20, 2022
Malware in calc_tj7r6uk4vf
1 compromised version
- Jun 20, 2022
Malware in internal_pkg_for_verd
1 compromised version
- Jun 20, 2022
Malware in calc_fh2qxzsj7s
1 compromised version
- Jun 20, 2022
Malware in internal_org_dependency
1 compromised version
- Jun 20, 2022
Malicious code in calc_sy1m2urjh4 (npm)
- Jun 20, 2022
Malicious code in calc_prn3ueihh9 (npm)
- Jun 20, 2022
Malicious code in calc_e01qd8xyxz (npm)
Page 6503 of 6,634