Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in pnpwebackplugin (npm)
- Aug 19, 2022
Malicious code in pluarlizse (npm)
- Aug 19, 2022
Malicious code in plginerro (npm)
- Aug 19, 2022
Malicious code in pjrodpts (npm)
- Aug 19, 2022
Malicious code in phapntomjs0prebeuilt (npm)
- Aug 19, 2022
Malicious code in pgifo (npm)
- Aug 19, 2022
Malicious code in pdatuenotifier (npm)
- Aug 19, 2022
Malicious code in pathyisabsolute (npm)
- Aug 19, 2022
Malicious code in passpzrtfaueth2 (npm)
- Aug 19, 2022
Malicious code in pass2portstrategy (npm)
- Aug 19, 2022
Malicious code in pasportoath (npm)
- Aug 19, 2022
Malicious code in pasportlocal (npm)
- Aug 19, 2022
Malicious code in otenvexpnd (npm)
- Aug 19, 2022
Malicious code in optimiecssassetswebpackplugin (npm)
- Aug 19, 2022
Malicious code in onmnom (npm)
- Aug 19, 2022
Malicious code in onfiished (npm)
- Aug 19, 2022
Malicious code in ogsymbos (npm)
- Aug 19, 2022
Malicious code in oenzymeadapterreact16 (npm)
- Aug 19, 2022
Malicious code in odeforge (npm)
- Aug 19, 2022
Malicious code in odecache (npm)
- Aug 19, 2022
Malicious code in odashthrottle (npm)
- Aug 19, 2022
Malicious code in odashes (npm)
- Aug 19, 2022
Malicious code in oc8etio (npm)
- Aug 19, 2022
Malicious code in objetpath (npm)
- Aug 19, 2022
Malicious code in objecgasissgn (npm)
- Aug 19, 2022
Malicious code in objebtassign (npm)
- Aug 19, 2022
Malicious code in nydeemoji (npm)
- Aug 19, 2022
Malicious code in nurijfs (npm)
- Aug 19, 2022
Malicious code in nunjcke (npm)
- Aug 19, 2022
Malicious code in nsiscoldrs (npm)
- Aug 19, 2022
Malicious code in nrecompos4 (npm)
- Aug 19, 2022
Malicious code in noseaixer (npm)
- Aug 19, 2022
Malicious code in normaslizecss (npm)
- Aug 19, 2022
Malicious code in normalilzeurl (npm)
- Aug 19, 2022
Malicious code in normaliewheel (npm)
- Aug 19, 2022
Malicious code in nokdepregyjp (npm)
- Aug 19, 2022
Malicious code in nodenotiier (npm)
- Aug 19, 2022
Malicious code in nodehass (npm)
- Aug 19, 2022
Malicious code in nodeglp (npm)
- Aug 19, 2022
Malicious code in nodeg5i (npm)
- Aug 19, 2022
Malicious code in nodeech (npm)
- Aug 19, 2022
Malicious code in noddir (npm)
- Aug 19, 2022
Malicious code in nldeuuid (npm)
- Aug 19, 2022
Malicious code in ninimis (npm)
- Aug 19, 2022
Malicious code in ni5b (npm)
- Aug 19, 2022
Malicious code in neret (npm)
- Aug 19, 2022
Malicious code in ndeschledule (npm)
- Aug 19, 2022
Malicious code in nde4watch (npm)
- Aug 19, 2022
Malicious code in mugtimach (npm)
- Aug 19, 2022
Malicious code in msqsl (npm)
Page 7033 of 7,293