Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in webpack-cil (npm)
- Aug 19, 2022
Malicious code in webpack-3undle-analyr (npm)
- Aug 19, 2022
Malicious code in webn5ack (npm)
- Aug 19, 2022
Malicious code in webb3 (npm)
- Aug 19, 2022
Malicious code in weback (npm)
- Aug 19, 2022
Malicious code in weact-d5tepicker (npm)
- Aug 19, 2022
Malicious code in wcebpack-bunde-analyzer (npm)
- Aug 19, 2022
Malicious code in wbpac-hot-middwleware (npm)
- Aug 19, 2022
Malicious code in wavchif (npm)
- Aug 19, 2022
Malicious code in vuez-template-compile (npm)
- Aug 19, 2022
Malicious code in vue-style-gloder (npm)
- Aug 19, 2022
Malicious code in vniyl-fs (npm)
- Aug 19, 2022
Malicious code in vinyl-sf (npm)
- Aug 19, 2022
Malicious code in vikyl-buf2fer (npm)
- Aug 19, 2022
Malicious code in veu-router (npm)
- Aug 19, 2022
Malicious code in ve-loaer (npm)
- Aug 19, 2022
Malicious code in vbtgoa (npm)
- Aug 19, 2022
Malicious code in vazliwd-url (npm)
- Aug 19, 2022
Malicious code in validaqr (npm)
- Aug 19, 2022
Malicious code in uwrnng (npm)
- Aug 19, 2022
Malicious code in uwrljoin (npm)
- Aug 19, 2022
Malicious code in utia (npm)
- Aug 19, 2022
Malicious code in userhme (npm)
- Aug 19, 2022
Malicious code in url-w.parse (npm)
- Aug 19, 2022
Malicious code in url-pafes (npm)
- Aug 19, 2022
Malicious code in uplex-child-process (npm)
- Aug 19, 2022
Malicious code in ttp-error (npm)
- Aug 19, 2022
Malicious code in node-bbael (npm)
- Aug 19, 2022
Malicious code in hopk (npm)
- Aug 19, 2022
Malicious code in duplex-child-rocess (npm)
- Aug 19, 2022
Malicious code in duplex-child-orocess (npm)
- Aug 19, 2022
Malware in zyamkljs
1 compromised version
- Aug 19, 2022
Malware in uwrnng
1 compromised version
- Aug 19, 2022
Malware in webpack-cil
1 compromised version
- Aug 19, 2022
Malware in xmdzdom
1 compromised version
- Aug 19, 2022
Malware in vinyl-sf
1 compromised version
- Aug 19, 2022
Malware in wcebpack-bunde-analyzer
1 compromised version
- Aug 19, 2022
Malware in url-pafes
1 compromised version
- Aug 19, 2022
Malware in yncrquest
1 compromised version
- Aug 19, 2022
Malware in utia
1 compromised version
- Aug 19, 2022
Malware in vue-style-gloder
1 compromised version
- Aug 19, 2022
Malware in xlj2s
1 compromised version
- Aug 19, 2022
Malware in duplex-child-rocess
1 compromised version
- Aug 19, 2022
Malware in weback
1 compromised version
- Aug 19, 2022
Malware in xbcrypt-nohejs
1 compromised version
- Aug 19, 2022
Malware in vuez-template-compile
1 compromised version
- Aug 19, 2022
Malware in whn
1 compromised version
- Aug 19, 2022
Malware in node-bbael
1 compromised version
- Aug 19, 2022
Malware in webpack-3undle-analyr
1 compromised version
- Aug 19, 2022
Malware in xpsaht
1 compromised version
Page 7014 of 7,293