Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in rollup-pugin-babek
1 compromised version
- Aug 19, 2022
Malware in redux-cations
1 compromised version
- Aug 19, 2022
Malware in regeneraor-runteime
1 compromised version
- Aug 19, 2022
Malware in reamd
1 compromised version
- Aug 19, 2022
Malware in rjammda
1 compromised version
- Aug 19, 2022
Malware in rnaftjs
1 compromised version
- Aug 19, 2022
Malware in react-erro-roevrlay
1 compromised version
- Aug 19, 2022
Malware in randombytse
1 compromised version
- Aug 19, 2022
Malware in rollup-pluginuls
1 compromised version
- Aug 19, 2022
Malware in readgz-cpkg
1 compromised version
- Aug 19, 2022
Malware in qngular-animane
1 compromised version
- Aug 19, 2022
Malware in rollup-pulgin-comsonjs
1 compromised version
- Aug 19, 2022
Malware in rec3t-dev-utils
1 compromised version
- Aug 19, 2022
Malware in react-nati0e-vecor-icons
1 compromised version
- Aug 19, 2022
Malicious code in pretiy-ytes (npm)
- Aug 19, 2022
Malicious code in ppp-types (npm)
- Aug 19, 2022
Malicious code in pplitu2 (npm)
- Aug 19, 2022
Malicious code in postcss-fleexbugs-fixs (npm)
- Aug 19, 2022
Malicious code in pop9erwjs (npm)
- Aug 19, 2022
Malicious code in poostcss-imort (npm)
- Aug 19, 2022
Malicious code in plis (npm)
- Aug 19, 2022
Malicious code in phantwomj (npm)
- Aug 19, 2022
Malicious code in pgu (npm)
- Aug 19, 2022
Malicious code in pfstcgss (npm)
- Aug 19, 2022
Malicious code in penzpyme-adapter-2react-16 (npm)
- Aug 19, 2022
Malicious code in peep-assign (npm)
- Aug 19, 2022
Malicious code in path-to-reugep (npm)
- Aug 19, 2022
Malicious code in pasrsw5 (npm)
- Aug 19, 2022
Malicious code in p4assport-oatuh2 (npm)
- Aug 19, 2022
Malicious code in oujec.assigs (npm)
- Aug 19, 2022
Malicious code in oug-cookie (npm)
- Aug 19, 2022
Malicious code in opy-wepback-plugin (npm)
- Aug 19, 2022
Malicious code in opstimlst (npm)
- Aug 19, 2022
Malicious code in ooa-mqonut (npm)
- Aug 19, 2022
Malicious code in onrmalize.cssl (npm)
- Aug 19, 2022
Malicious code in onmnnm (npm)
- Aug 19, 2022
Malicious code in ommand-eixsts (npm)
- Aug 19, 2022
Malicious code in om-helers (npm)
- Aug 19, 2022
Malicious code in ollup-pugincommonjs (npm)
- Aug 19, 2022
Malicious code in ojment (npm)
- Aug 19, 2022
Malicious code in odash.fareach (npm)
- Aug 19, 2022
Malicious code in oaut (npm)
- Aug 19, 2022
Malicious code in o7nyfinished (npm)
- Aug 19, 2022
Malicious code in nuynjc6ks (npm)
- Aug 19, 2022
Malicious code in nuique-random-arr-y (npm)
- Aug 19, 2022
Malicious code in nrmalize-usl (npm)
- Aug 19, 2022
Malicious code in nrmadanadaogress (npm)
- Aug 19, 2022
Malicious code in npomog (npm)
- Aug 19, 2022
Malicious code in npm-run-lal (npm)
- Aug 19, 2022
Malicious code in nodmeon (npm)
Page 7021 of 7,293