Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in loosee3nvuyf
1 compromised version
- Aug 19, 2022
Malware in loaderuwils
1 compromised version
- Aug 19, 2022
Malware in iwnsoc
1 compromised version
- Aug 19, 2022
Malware in mafkd
1 compromised version
- Aug 19, 2022
Malware in lliptiic
1 compromised version
- Aug 19, 2022
Malware in jszi
1 compromised version
- Aug 19, 2022
Malware in kofarouter
1 compromised version
- Aug 19, 2022
Malware in lors
1 compromised version
- Aug 19, 2022
Malware in kmastatic
1 compromised version
- Aug 19, 2022
Malware in iswpdl
1 compromised version
- Aug 19, 2022
Malware in lodashiequal
1 compromised version
- Aug 19, 2022
Malware in lodashsiplainobjet
1 compromised version
- Aug 19, 2022
Malware in jsnwebtokn
1 compromised version
- Aug 19, 2022
Malware in jestenvironmentjsdomfouteen
1 compromised version
- Aug 19, 2022
Malware in j8i
1 compromised version
- Aug 19, 2022
Malware in lodslhdomit
1 compromised version
- Aug 19, 2022
Malware in lodastdefaults
1 compromised version
- Aug 19, 2022
Malware in kioamout
1 compromised version
- Aug 19, 2022
Malware in isnon
1 compromised version
- Aug 19, 2022
Malware in lodasfhmap
1 compromised version
- Aug 19, 2022
Malware in joek
1 compromised version
- Aug 19, 2022
Malware in lzdashuniq
1 compromised version
- Aug 19, 2022
Malware in karmaajsmins
1 compromised version
- Aug 19, 2022
Malware in ivea
1 compromised version
- Aug 19, 2022
Malware in mejj
1 compromised version
- Aug 19, 2022
Malware in jtpnpresolver
1 compromised version
- Aug 19, 2022
Malware in lodashdkbounce
1 compromised version
- Aug 19, 2022
Malware in laglget
1 compromised version
- Aug 19, 2022
Malware in karmaphantomjlauncher
1 compromised version
- Aug 19, 2022
Malware in knodeexte3nd
1 compromised version
- Aug 19, 2022
Malware in litelemdent
1 compromised version
- Aug 19, 2022
Malware in jo5
1 compromised version
- Aug 19, 2022
Malware in inquirerautocompletebprompt
1 compromised version
- Aug 19, 2022
Malware in lodashisfuncion
1 compromised version
- Aug 19, 2022
Malware in jsouile
1 compromised version
- Aug 19, 2022
Malware in loaashmcrge
1 compromised version
- Aug 19, 2022
Malware in ionvlite
1 compromised version
- Aug 19, 2022
Malware in lodashclonqedeew
1 compromised version
- Aug 19, 2022
Malware in jsonstsream
1 compromised version
- Aug 19, 2022
Malware in loashpbick
1 compromised version
- Aug 19, 2022
Malware in mcha
1 compromised version
- Aug 19, 2022
Malware in jsmene
1 compromised version
- Aug 19, 2022
Malware in jwtdecope
1 compromised version
- Aug 19, 2022
Malware in makkelsdir
1 compromised version
- Aug 19, 2022
Malware in istannl
1 compromised version
- Aug 19, 2022
Malware in isplaivnobject
1 compromised version
- Aug 19, 2022
Malware in jasminecor
1 compromised version
- Aug 19, 2022
Malware in lodashflten
1 compromised version
- Aug 19, 2022
Malware in miem
1 compromised version
- Aug 19, 2022
Malware in logl8v
1 compromised version
Page 7037 of 7,293