Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jul 12, 2022
Malware in hnyzaklqkgmobdcv
1 compromised version
- Jul 12, 2022
Malicious code in gumhecwixzkqfkbs (npm)
- Jul 12, 2022
Malware in gumhecwixzkqfkbs
1 compromised version
- Jul 12, 2022
Malicious code in zjdkvqcxmknipaye (npm)
- Jul 12, 2022
Malware in zjdkvqcxmknipaye
1 compromised version
- Jul 12, 2022
Malicious code in qemixknbaocwkful (npm)
- Jul 12, 2022
Malware in qemixknbaocwkful
1 compromised version
- Jul 12, 2022
Malicious code in ruldhziaxpmvgtck (npm)
- Jul 12, 2022
Malware in ruldhziaxpmvgtck
1 compromised version
- Jul 12, 2022
Malicious code in sfhrydzmeajqvkwi (npm)
- Jul 12, 2022
Malware in sfhrydzmeajqvkwi
1 compromised version
- Jul 12, 2022
Malicious code in lkauovkgjbridwhy (npm)
- Jul 12, 2022
Malware in lkauovkgjbridwhy
1 compromised version
- Jul 12, 2022
Malicious code in gumcqskhearbotpz (npm)
- Jul 12, 2022
Malware in gumcqskhearbotpz
1 compromised version
- Jul 12, 2022
Malicious code in xvpasfokuljqzhki (npm)
- Jul 12, 2022
Malware in xvpasfokuljqzhki
1 compromised version
- Jul 12, 2022
Malicious code in @igraal/web-design-system (npm)
- Jul 12, 2022
Malware in @igraal/web-design-system
1 compromised version
- Jul 12, 2022
Malicious code in bc-image-loader (npm)
- Jul 12, 2022
Malware in bc-image-loader
1 compromised version
- Jul 11, 2022
Malicious code in rdfqkklocipwutze (npm)
- Jul 11, 2022
Malware in rdfqkklocipwutze
1 compromised version
- Jul 11, 2022
Malicious code in eazyminer-fsdjufhsdjf (npm)
- Jul 11, 2022
Malware in eazyminer-fsdjufhsdjf
1 compromised version
- Jul 11, 2022
Malicious code in pasirntlfhxmywcg (npm)
- Jul 11, 2022
Malware in pasirntlfhxmywcg
1 compromised version
- Jul 11, 2022
Malicious code in qnslihcvgrbtjedy (npm)
- Jul 11, 2022
Malware in qnslihcvgrbtjedy
1 compromised version
- Jul 11, 2022
Malicious code in vhustlcfimgkwyzq (npm)
- Jul 11, 2022
Malware in vhustlcfimgkwyzq
1 compromised version
- Jul 11, 2022
Malicious code in donjhcqfeapzbrwk (npm)
- Jul 11, 2022
Malware in donjhcqfeapzbrwk
1 compromised version
- Jul 11, 2022
Malicious code in ainruohkpglvwsmj (npm)
- Jul 11, 2022
Malicious code in nmgpvbyzeufscxjh (npm)
- Jul 11, 2022
Malware in ainruohkpglvwsmj
1 compromised version
- Jul 11, 2022
Malware in nmgpvbyzeufscxjh
1 compromised version
- Jul 11, 2022
Malicious code in cnkqebharvwztkgp (npm)
- Jul 11, 2022
Malware in cnkqebharvwztkgp
1 compromised version
- Jul 11, 2022
Malicious code in rfjuqaiomzcdgxtv (npm)
- Jul 11, 2022
Malware in rfjuqaiomzcdgxtv
1 compromised version
- Jul 11, 2022
Malicious code in lnuhfadctpvbwrsj (npm)
- Jul 11, 2022
Malware in lnuhfadctpvbwrsj
1 compromised version
- Jul 11, 2022
Malicious code in rphzfwtcqgidmank (npm)
- Jul 11, 2022
Malware in rphzfwtcqgidmank
1 compromised version
- Jul 11, 2022
Malicious code in yeacjwvlotzixpuh (npm)
- Jul 11, 2022
Malicious code in xshvczomkjpwyalf (npm)
- Jul 11, 2022
Malicious code in fcskuqoiemhdkwra (npm)
- Jul 11, 2022
Malware in xshvczomkjpwyalf
1 compromised version
- Jul 11, 2022
Malware in yeacjwvlotzixpuh
1 compromised version
Page 7067 of 7,293