Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in motin (npm)
- Aug 19, 2022
Malicious code in mongobd (npm)
- Aug 19, 2022
Malicious code in momenttimezhone (npm)
- Aug 19, 2022
Malicious code in minicssextractpluin (npm)
- Aug 19, 2022
Malicious code in memoryzs (npm)
- Aug 19, 2022
Malicious code in mefthos (npm)
- Aug 19, 2022
Malware in odeforge
1 compromised version
- Aug 19, 2022
Malware in possnested
1 compromised version
- Aug 19, 2022
Malware in pgifo
1 compromised version
- Aug 19, 2022
Malware in odashthrottle
1 compromised version
- Aug 19, 2022
Malware in neret
1 compromised version
- Aug 19, 2022
Malware in minicssextractpluin
1 compromised version
- Aug 19, 2022
Malware in plginerro
1 compromised version
- Aug 19, 2022
Malware in optimiecssassetswebpackplugin
1 compromised version
- Aug 19, 2022
Malware in nodehass
1 compromised version
- Aug 19, 2022
Malware in motin
1 compromised version
- Aug 19, 2022
Malware in normaslizecss
1 compromised version
- Aug 19, 2022
Malware in normaliewheel
1 compromised version
- Aug 19, 2022
Malware in otenvexpnd
1 compromised version
- Aug 19, 2022
Malware in ninimis
1 compromised version
- Aug 19, 2022
Malware in objebtassign
1 compromised version
- Aug 19, 2022
Malware in pjrodpts
1 compromised version
- Aug 19, 2022
Malware in normalilzeurl
1 compromised version
- Aug 19, 2022
Malware in mongobd
1 compromised version
- Aug 19, 2022
Malware in nsiscoldrs
1 compromised version
- Aug 19, 2022
Malware in ndeschledule
1 compromised version
- Aug 19, 2022
Malware in pluarlizse
1 compromised version
- Aug 19, 2022
Malware in nodeech
1 compromised version
- Aug 19, 2022
Malware in postcssfvlgexugsfixes
1 compromised version
- Aug 19, 2022
Malware in pnpwebackplugin
1 compromised version
- Aug 19, 2022
Malware in pasportoath
1 compromised version
- Aug 19, 2022
Malware in mugtimach
1 compromised version
- Aug 19, 2022
Malware in nunjcke
1 compromised version
- Aug 19, 2022
Malware in ni5b
1 compromised version
- Aug 19, 2022
Malware in nrecompos4
1 compromised version
- Aug 19, 2022
Malware in nokdepregyjp
1 compromised version
- Aug 19, 2022
Malware in pathyisabsolute
1 compromised version
- Aug 19, 2022
Malware in memoryzs
1 compromised version
- Aug 19, 2022
Malware in momenttimezhone
1 compromised version
- Aug 19, 2022
Malware in postcssmipot
1 compromised version
- Aug 19, 2022
Malware in oc8etio
1 compromised version
- Aug 19, 2022
Malware in nydeemoji
1 compromised version
- Aug 19, 2022
Malware in ogsymbos
1 compromised version
- Aug 19, 2022
Malware in odecache
1 compromised version
- Aug 19, 2022
Malware in noseaixer
1 compromised version
- Aug 19, 2022
Malware in nldeuuid
1 compromised version
- Aug 19, 2022
Malware in nurijfs
1 compromised version
- Aug 19, 2022
Malware in objecgasissgn
1 compromised version
- Aug 19, 2022
Malware in postcsscksnext
1 compromised version
- Aug 19, 2022
Malware in nodeg5i
1 compromised version
Page 7034 of 7,293