Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in xeedlx
1 compromised version
- Aug 19, 2022
Malware in uwrljoin
1 compromised version
- Aug 19, 2022
Malware in webpback-dev-esrver
1 compromised version
- Aug 19, 2022
Malware in wnode-acche
1 compromised version
- Aug 19, 2022
Malware in xpostcss-loadsr
1 compromised version
- Aug 19, 2022
Malware in url-w.parse
1 compromised version
- Aug 19, 2022
Malware in hopk
1 compromised version
- Aug 19, 2022
Malware in validaqr
1 compromised version
- Aug 19, 2022
Malware in weact-d5tepicker
1 compromised version
- Aug 19, 2022
Malware in yunt
1 compromised version
- Aug 19, 2022
Malware in winta
1 compromised version
- Aug 19, 2022
Malware in duplex-child-orocess
1 compromised version
- Aug 19, 2022
Malware in uplex-child-process
1 compromised version
- Aug 19, 2022
Malware in xten
1 compromised version
- Aug 19, 2022
Malware in webn5ack
1 compromised version
- Aug 19, 2022
Malware in vbtgoa
1 compromised version
- Aug 19, 2022
Malware in ttp-error
1 compromised version
- Aug 19, 2022
Malware in xrunt-cl
1 compromised version
- Aug 19, 2022
Malware in wbpac-hot-middwleware
1 compromised version
- Aug 19, 2022
Malware in xgzgexp
1 compromised version
- Aug 19, 2022
Malware in veu-router
1 compromised version
- Aug 19, 2022
Malware in vikyl-buf2fer
1 compromised version
- Aug 19, 2022
Malware in userhme
1 compromised version
- Aug 19, 2022
Malware in vniyl-fs
1 compromised version
- Aug 19, 2022
Malware in ve-loaer
1 compromised version
- Aug 19, 2022
Malware in yeoman-enviromenv
1 compromised version
- Aug 19, 2022
Malware in vazliwd-url
1 compromised version
- Aug 19, 2022
Malware in wavchif
1 compromised version
- Aug 19, 2022
Malware in yargs-parxe
1 compromised version
- Aug 19, 2022
Malware in xml2jsno
1 compromised version
- Aug 19, 2022
Malware in webb3
1 compromised version
- Aug 19, 2022
Malware in yeoman-33enerator
1 compromised version
- Aug 19, 2022
Malware in xc4hrat.js
1 compromised version
- Aug 19, 2022
Malware in wexack-node-externals
1 compromised version
- Aug 19, 2022
Malicious code in uraib (npm)
- Aug 19, 2022
Malicious code in unzdrscore (npm)
- Aug 19, 2022
Malicious code in unist-utilu-4visit (npm)
- Aug 19, 2022
Malicious code in umreral (npm)
- Aug 19, 2022
Malicious code in ulp-watcgh (npm)
- Aug 19, 2022
Malicious code in ull-tream (npm)
- Aug 19, 2022
Malicious code in uglpti9f (npm)
- Aug 19, 2022
Malicious code in uglp-rename (npm)
- Aug 19, 2022
Malicious code in ug-lifjjs-webpack-plugin (npm)
- Aug 19, 2022
Malicious code in ttpd-erors (npm)
- Aug 19, 2022
Malicious code in tslnit (npm)
- Aug 19, 2022
Malicious code in tsli (npm)
- Aug 19, 2022
Malicious code in tsilnt (npm)
- Aug 19, 2022
Malicious code in ts--ptp (npm)
- Aug 19, 2022
Malicious code in trcer (npm)
- Aug 19, 2022
Malicious code in traecr (npm)
Page 7015 of 7,293