Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in clwtab8le
1 compromised version
- Aug 19, 2022
Malware in babelplugintransformruntimy
1 compromised version
- Aug 19, 2022
Malware in bpprootpaht
1 compromised version
- Aug 19, 2022
Malware in babelspolyfil
1 compromised version
- Aug 19, 2022
Malware in commandlinesage
1 compromised version
- Aug 19, 2022
Malware in clpiboardy
1 compromised version
- Aug 19, 2022
Malware in babimelpluginlodash
1 compromised version
- Aug 19, 2022
Malware in babrlpdloader
1 compromised version
- Aug 19, 2022
Malware in broccolirmergetes
1 compromised version
- Aug 19, 2022
Malware in baseu64js
1 compromised version
- Aug 19, 2022
Malware in bfjus
1 compromised version
- Aug 19, 2022
Malware in baeltraverse
1 compromised version
- Aug 19, 2022
Malware in comnader
1 compromised version
- Aug 19, 2022
Malware in babelpreetreact
1 compromised version
- Aug 19, 2022
Malware in broccolifuknnes
1 compromised version
- Aug 19, 2022
Malware in bignunmberjs
1 compromised version
- Aug 19, 2022
Malware in clispmner
1 compromised version
- Aug 19, 2022
Malware in base46
1 compromised version
- Aug 19, 2022
Malware in bryp4t
1 compromised version
- Aug 19, 2022
Malware in bablpresetpev
1 compromised version
- Aug 19, 2022
Malware in commandeists
1 compromised version
- Aug 19, 2022
Malware in clicio
1 compromised version
- Aug 19, 2022
Malware in babetyopes
1 compromised version
- Aug 19, 2022
Malware in bootlstap
1 compromised version
- Aug 19, 2022
Malware in clpiboard
1 compromised version
- Aug 19, 2022
Malware in chiladprocess
1 compromised version
- Aug 19, 2022
Malware in casesensitijepathswebpackplugin
1 compromised version
- Aug 19, 2022
Malware in babelzpresetstage2
1 compromised version
- Aug 19, 2022
Malware in babelpreset4stag3
1 compromised version
- Aug 19, 2022
Malware in babpuuginimport
1 compromised version
- Aug 19, 2022
Malware in babelplugnamedassetimport
1 compromised version
- Aug 19, 2022
Malware in biuill
1 compromised version
- Aug 19, 2022
Malware in c0onje
1 compromised version
- Aug 19, 2022
Malware in babelplugintransfomreactremoveproptypes
1 compromised version
- Aug 19, 2022
Malicious code in amll (npm)
- Aug 19, 2022
Malicious code in amelcsxe (npm)
- Aug 19, 2022
Malicious code in alidurl (npm)
- Aug 19, 2022
Malicious code in ahtts (npm)
- Aug 19, 2022
Malicious code in agdlebasr (npm)
- Aug 19, 2022
Malicious code in abbelregiswter (npm)
- Aug 19, 2022
Malicious code in untlidify (npm)
- Aug 19, 2022
Malicious code in 9mz (npm)
- Aug 19, 2022
Malicious code in 9args (npm)
- Aug 19, 2022
Malicious code in 7unzp (npm)
- Aug 19, 2022
Malicious code in 7lu (npm)
- Aug 19, 2022
Malicious code in 6jestlr (npm)
- Aug 19, 2022
Malicious code in 5rn (npm)
- Aug 19, 2022
Malicious code in 5blong (npm)
- Aug 19, 2022
Malicious code in babelplugintansofrmdecoratorlegacy (npm)
- Aug 19, 2022
Malicious code in babelpluginmodulexresjzlver (npm)
Page 7048 of 7,293