Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in uglpti9f
1 compromised version
- Aug 19, 2022
Malware in suer
1 compromised version
- Aug 19, 2022
Malware in ts--ptp
1 compromised version
- Aug 19, 2022
Malware in tioredks
1 compromised version
- Aug 19, 2022
Malware in suorce-map
1 compromised version
- Aug 19, 2022
Malware in suhallowexqual
1 compromised version
- Aug 19, 2022
Malware in ss2
1 compromised version
- Aug 19, 2022
Malware in thts
1 compromised version
- Aug 19, 2022
Malware in sqwli3
1 compromised version
- Aug 19, 2022
Malware in sprinfjt
1 compromised version
- Aug 19, 2022
Malware in sysezjs
1 compromised version
- Aug 19, 2022
Malware in sptylelhnt-order
1 compromised version
- Aug 19, 2022
Malware in uglp-rename
1 compromised version
- Aug 19, 2022
Malware in terser-ebrpack-plugin
1 compromised version
- Aug 19, 2022
Malware in trcer
1 compromised version
- Aug 19, 2022
Malware in srve-favico
1 compromised version
- Aug 19, 2022
Malware in tdype-si
1 compromised version
- Aug 19, 2022
Malware in supoertes
1 compromised version
- Aug 19, 2022
Malware in tld5ify
1 compromised version
- Aug 19, 2022
Malware in tinhcyxolor2
1 compromised version
- Aug 19, 2022
Malware in sw-prescache-wubpack-plugin
1 compromised version
- Aug 19, 2022
Malware in tslnit
1 compromised version
- Aug 19, 2022
Malware in umreral
1 compromised version
- Aug 19, 2022
Malware in tldyfy
1 compromised version
- Aug 19, 2022
Malware in tsilnt
1 compromised version
- Aug 19, 2022
Malware in ug-lifjjs-webpack-plugin
1 compromised version
- Aug 19, 2022
Malware in strip-json-combmentd
1 compromised version
- Aug 19, 2022
Malware in stcak-trace
1 compromised version
- Aug 19, 2022
Malware in ulp-watcgh
1 compromised version
- Aug 19, 2022
Malware in ttpd-erors
1 compromised version
- Aug 19, 2022
Malware in text-ytabl
1 compromised version
- Aug 19, 2022
Malware in style-componenx
1 compromised version
- Aug 19, 2022
Malware in traecr
1 compromised version
- Aug 19, 2022
Malware in stlintreact
1 compromised version
- Aug 19, 2022
Malware in thgroukgg
1 compromised version
- Aug 19, 2022
Malware in stklus-loaer
1 compromised version
- Aug 19, 2022
Malicious code in source-ap-loadper (npm)
- Aug 19, 2022
Malicious code in soudl (npm)
- Aug 19, 2022
Malicious code in son-stringiy-safe (npm)
- Aug 19, 2022
Malicious code in socket.ioo-cient (npm)
- Aug 19, 2022
Malicious code in soarou0er (npm)
- Aug 19, 2022
Malicious code in slughifvy (npm)
- Aug 19, 2022
Malicious code in slit-stged (npm)
- Aug 19, 2022
Malicious code in sint-plugin-prkomise (npm)
- Aug 19, 2022
Malicious code in simplegi (npm)
- Aug 19, 2022
Malicious code in showadlown (npm)
- Aug 19, 2022
Malicious code in shint (npm)
- Aug 19, 2022
Malicious code in sh0rtiwd (npm)
- Aug 19, 2022
Malicious code in sfit (npm)
- Aug 19, 2022
Malicious code in sfebuffer (npm)
Page 7017 of 7,293