Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,856 total · sorted newest first- Aug 19, 2022
Malware in pasrsw5
1 compromised version
- Aug 19, 2022
Malware in pretiy-ytes
1 compromised version
- Aug 19, 2022
Malware in phantwomj
1 compromised version
- Aug 19, 2022
Malware in p4assport-oatuh2
1 compromised version
- Aug 19, 2022
Malware in ooa-mqonut
1 compromised version
- Aug 19, 2022
Malware in ppp-types
1 compromised version
- Aug 19, 2022
Malware in pop9erwjs
1 compromised version
- Aug 19, 2022
Malware in om-helers
1 compromised version
- Aug 19, 2022
Malware in penzpyme-adapter-2react-16
1 compromised version
- Aug 19, 2022
Malware in pplitu2
1 compromised version
- Aug 19, 2022
Malware in opstimlst
1 compromised version
- Aug 19, 2022
Malware in npomog
1 compromised version
- Aug 19, 2022
Malware in npm-run-lal
1 compromised version
- Aug 19, 2022
Malware in poostcss-imort
1 compromised version
- Aug 19, 2022
Malware in nuique-random-arr-y
1 compromised version
- Aug 19, 2022
Malware in nodmeon
1 compromised version
- Aug 19, 2022
Malware in peep-assign
1 compromised version
- Aug 19, 2022
Malware in oug-cookie
1 compromised version
- Aug 19, 2022
Malware in ommand-eixsts
1 compromised version
- Aug 19, 2022
Malware in onrmalize.cssl
1 compromised version
- Aug 19, 2022
Malware in pgu
1 compromised version
- Aug 19, 2022
Malware in onmnnm
1 compromised version
- Aug 19, 2022
Malware in ollup-pugincommonjs
1 compromised version
- Aug 19, 2022
Malicious code in node-pre-tgyep (npm)
- Aug 19, 2022
Malicious code in njip (npm)
- Aug 19, 2022
Malicious code in niquirer-autocomplete-prompt (npm)
- Aug 19, 2022
Malicious code in nery (npm)
- Aug 19, 2022
Malicious code in nedemqiler (npm)
- Aug 19, 2022
Malicious code in nebd (npm)
- Aug 19, 2022
Malicious code in mvue-clss-compoment (npm)
- Aug 19, 2022
Malicious code in msallowequa (npm)
- Aug 19, 2022
Malicious code in mr2ge (npm)
- Aug 19, 2022
Malicious code in mongoos (npm)
- Aug 19, 2022
Malicious code in mongdg (npm)
- Aug 19, 2022
Malicious code in mo8x (npm)
- Aug 19, 2022
Malicious code in mkidrp (npm)
- Aug 19, 2022
Malicious code in mkae-dr (npm)
- Aug 19, 2022
Malicious code in mgulp-pluber (npm)
- Aug 19, 2022
Malicious code in methddoverrile (npm)
- Aug 19, 2022
Malware in methddoverrile
1 compromised version
- Aug 19, 2022
Malware in mr2ge
1 compromised version
- Aug 19, 2022
Malware in mo8x
1 compromised version
- Aug 19, 2022
Malware in mongdg
1 compromised version
- Aug 19, 2022
Malware in nedemqiler
1 compromised version
- Aug 19, 2022
Malware in njip
1 compromised version
- Aug 19, 2022
Malware in mongoos
1 compromised version
- Aug 19, 2022
Malware in niquirer-autocomplete-prompt
1 compromised version
- Aug 19, 2022
Malware in mgulp-pluber
1 compromised version
- Aug 19, 2022
Malware in nebd
1 compromised version
- Aug 19, 2022
Malware in msallowequa
1 compromised version
Page 7027 of 7,298