Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 19, 2022
Malicious code in o7nyfinished (npm)
- Aug 19, 2022
Malicious code in nuynjc6ks (npm)
- Aug 19, 2022
Malicious code in nuique-random-arr-y (npm)
- Aug 19, 2022
Malicious code in nrmalize-usl (npm)
- Aug 19, 2022
Malicious code in nrmadanadaogress (npm)
- Aug 19, 2022
Malicious code in npomog (npm)
- Aug 19, 2022
Malicious code in npm-run-lal (npm)
- Aug 19, 2022
Malicious code in nodmeon (npm)
- Aug 19, 2022
Malware in postcss-fleexbugs-fixs
1 compromised version
- Aug 19, 2022
Malware in oujec.assigs
1 compromised version
- Aug 19, 2022
Malware in o7nyfinished
1 compromised version
- Aug 19, 2022
Malware in path-to-reugep
1 compromised version
- Aug 19, 2022
Malware in nuynjc6ks
1 compromised version
- Aug 19, 2022
Malware in opy-wepback-plugin
1 compromised version
- Aug 19, 2022
Malware in pfstcgss
1 compromised version
- Aug 19, 2022
Malware in nrmadanadaogress
1 compromised version
- Aug 19, 2022
Malware in plis
1 compromised version
- Aug 19, 2022
Malware in ojment
1 compromised version
- Aug 19, 2022
Malware in odash.fareach
1 compromised version
- Aug 19, 2022
Malware in oaut
1 compromised version
- Aug 19, 2022
Malware in nrmalize-usl
1 compromised version
- Aug 19, 2022
Malware in pasrsw5
1 compromised version
- Aug 19, 2022
Malware in pretiy-ytes
1 compromised version
- Aug 19, 2022
Malware in phantwomj
1 compromised version
- Aug 19, 2022
Malware in p4assport-oatuh2
1 compromised version
- Aug 19, 2022
Malware in ooa-mqonut
1 compromised version
- Aug 19, 2022
Malware in ppp-types
1 compromised version
- Aug 19, 2022
Malware in pop9erwjs
1 compromised version
- Aug 19, 2022
Malware in om-helers
1 compromised version
- Aug 19, 2022
Malware in penzpyme-adapter-2react-16
1 compromised version
- Aug 19, 2022
Malware in pplitu2
1 compromised version
- Aug 19, 2022
Malware in opstimlst
1 compromised version
- Aug 19, 2022
Malware in npomog
1 compromised version
- Aug 19, 2022
Malware in npm-run-lal
1 compromised version
- Aug 19, 2022
Malware in poostcss-imort
1 compromised version
- Aug 19, 2022
Malware in nuique-random-arr-y
1 compromised version
- Aug 19, 2022
Malware in nodmeon
1 compromised version
- Aug 19, 2022
Malware in peep-assign
1 compromised version
- Aug 19, 2022
Malware in oug-cookie
1 compromised version
- Aug 19, 2022
Malware in ommand-eixsts
1 compromised version
- Aug 19, 2022
Malware in onrmalize.cssl
1 compromised version
- Aug 19, 2022
Malware in pgu
1 compromised version
- Aug 19, 2022
Malware in onmnnm
1 compromised version
- Aug 19, 2022
Malware in ollup-pugincommonjs
1 compromised version
- Aug 19, 2022
Malicious code in node-pre-tgyep (npm)
- Aug 19, 2022
Malicious code in njip (npm)
- Aug 19, 2022
Malicious code in niquirer-autocomplete-prompt (npm)
- Aug 19, 2022
Malicious code in nery (npm)
- Aug 19, 2022
Malicious code in nedemqiler (npm)
- Aug 19, 2022
Malicious code in nebd (npm)
Page 7022 of 7,293