Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,834 total · sorted newest first- Aug 19, 2022
Malicious code in onmnnm (npm)
- Aug 19, 2022
Malicious code in ommand-eixsts (npm)
- Aug 19, 2022
Malicious code in om-helers (npm)
- Aug 19, 2022
Malicious code in ollup-pugincommonjs (npm)
- Aug 19, 2022
Malicious code in ojment (npm)
- Aug 19, 2022
Malicious code in odash.fareach (npm)
- Aug 19, 2022
Malicious code in oaut (npm)
- Aug 19, 2022
Malicious code in o7nyfinished (npm)
- Aug 19, 2022
Malicious code in nuynjc6ks (npm)
- Aug 19, 2022
Malicious code in nuique-random-arr-y (npm)
- Aug 19, 2022
Malicious code in nrmalize-usl (npm)
- Aug 19, 2022
Malicious code in nrmadanadaogress (npm)
- Aug 19, 2022
Malicious code in npomog (npm)
- Aug 19, 2022
Malicious code in npm-run-lal (npm)
- Aug 19, 2022
Malicious code in nodmeon (npm)
- Aug 19, 2022
Malware in postcss-fleexbugs-fixs
1 compromised version
- Aug 19, 2022
Malware in oujec.assigs
1 compromised version
- Aug 19, 2022
Malware in o7nyfinished
1 compromised version
- Aug 19, 2022
Malware in path-to-reugep
1 compromised version
- Aug 19, 2022
Malware in nuynjc6ks
1 compromised version
- Aug 19, 2022
Malware in opy-wepback-plugin
1 compromised version
- Aug 19, 2022
Malware in pfstcgss
1 compromised version
- Aug 19, 2022
Malware in nrmadanadaogress
1 compromised version
- Aug 19, 2022
Malware in plis
1 compromised version
- Aug 19, 2022
Malware in ojment
1 compromised version
- Aug 19, 2022
Malware in odash.fareach
1 compromised version
- Aug 19, 2022
Malware in oaut
1 compromised version
- Aug 19, 2022
Malware in nrmalize-usl
1 compromised version
- Aug 19, 2022
Malware in pasrsw5
1 compromised version
- Aug 19, 2022
Malware in pretiy-ytes
1 compromised version
- Aug 19, 2022
Malware in phantwomj
1 compromised version
- Aug 19, 2022
Malware in p4assport-oatuh2
1 compromised version
- Aug 19, 2022
Malware in ooa-mqonut
1 compromised version
- Aug 19, 2022
Malware in ppp-types
1 compromised version
- Aug 19, 2022
Malware in pop9erwjs
1 compromised version
- Aug 19, 2022
Malware in om-helers
1 compromised version
- Aug 19, 2022
Malware in penzpyme-adapter-2react-16
1 compromised version
- Aug 19, 2022
Malware in pplitu2
1 compromised version
- Aug 19, 2022
Malware in opstimlst
1 compromised version
- Aug 19, 2022
Malware in npomog
1 compromised version
- Aug 19, 2022
Malware in npm-run-lal
1 compromised version
- Aug 19, 2022
Malware in poostcss-imort
1 compromised version
- Aug 19, 2022
Malware in nuique-random-arr-y
1 compromised version
- Aug 19, 2022
Malware in nodmeon
1 compromised version
- Aug 19, 2022
Malware in peep-assign
1 compromised version
- Aug 19, 2022
Malware in oug-cookie
1 compromised version
- Aug 19, 2022
Malware in ommand-eixsts
1 compromised version
- Aug 19, 2022
Malware in onrmalize.cssl
1 compromised version
- Aug 19, 2022
Malware in pgu
1 compromised version
- Aug 19, 2022
Malware in onmnnm
1 compromised version
Page 7026 of 7,297