Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jul 11, 2022
Malware in cnvofxjbmikwrlkh
1 compromised version
- Jul 11, 2022
Malicious code in otcpndfkwijlhesu (npm)
- Jul 11, 2022
Malicious code in eykqsbrzawtghvui (npm)
- Jul 11, 2022
Malware in eykqsbrzawtghvui
1 compromised version
- Jul 11, 2022
Malware in otcpndfkwijlhesu
1 compromised version
- Jul 11, 2022
Malicious code in zmodfqbpcyijkten (npm)
- Jul 11, 2022
Malicious code in tkogyxdcurwhfain (npm)
- Jul 11, 2022
Malware in zmodfqbpcyijkten
1 compromised version
- Jul 11, 2022
Malware in tkogyxdcurwhfain
1 compromised version
- Jul 11, 2022
Malicious code in gvcpxzyaohifketl (npm)
- Jul 11, 2022
Malware in gvcpxzyaohifketl
1 compromised version
- Jul 11, 2022
Malicious code in qkwyeczvxstmabjn (npm)
- Jul 11, 2022
Malware in qkwyeczvxstmabjn
1 compromised version
- Jul 11, 2022
Malicious code in zevkstacmkonlfdu (npm)
- Jul 11, 2022
Malware in zevkstacmkonlfdu
1 compromised version
- Jul 11, 2022
Malicious code in jszxcgeobiqvnhlm (npm)
- Jul 11, 2022
Malware in jszxcgeobiqvnhlm
1 compromised version
- Jul 11, 2022
Malicious code in ylropkmdjbvxiekt (npm)
- Jul 11, 2022
Malware in ylropkmdjbvxiekt
1 compromised version
- Jul 11, 2022
Malicious code in uigkvhamsfcyobxt (npm)
- Jul 11, 2022
Malware in uigkvhamsfcyobxt
1 compromised version
- Jul 11, 2022
Malicious code in etnhjzgmfwbocvqp (npm)
- Jul 11, 2022
Malware in etnhjzgmfwbocvqp
1 compromised version
- Jul 11, 2022
Malicious code in lokbpemghcrquyjz (npm)
- Jul 11, 2022
Malware in lokbpemghcrquyjz
1 compromised version
- Jul 11, 2022
Malicious code in syondbqvefzahmcl (npm)
- Jul 11, 2022
Malicious code in kbgfvtxykesdiojq (npm)
- Jul 11, 2022
Malware in syondbqvefzahmcl
1 compromised version
- Jul 11, 2022
Malware in kbgfvtxykesdiojq
1 compromised version
- Jul 11, 2022
Malicious code in kguwtvbsphcozale (npm)
- Jul 11, 2022
Malware in kguwtvbsphcozale
1 compromised version
- Jul 11, 2022
Malicious code in zuyapvkdcmxoiwbl (npm)
- Jul 11, 2022
Malicious code in ekjqybpfudscivmx (npm)
- Jul 11, 2022
Malware in zuyapvkdcmxoiwbl
1 compromised version
- Jul 11, 2022
Malware in ekjqybpfudscivmx
1 compromised version
- Jul 11, 2022
Malicious code in kxtupghkymwldfic (npm)
- Jul 11, 2022
Malicious code in itcknheoyvjplbaf (npm)
- Jul 11, 2022
Malicious code in duckrymwhlpaneos (npm)
- Jul 11, 2022
Malware in duckrymwhlpaneos
1 compromised version
- Jul 11, 2022
Malware in itcknheoyvjplbaf
1 compromised version
- Jul 11, 2022
Malware in kxtupghkymwldfic
1 compromised version
- Jul 11, 2022
Malicious code in abujtyvrmnckiodq (npm)
- Jul 11, 2022
Malicious code in okqaelhmbfuwipvz (npm)
- Jul 11, 2022
Malware in okqaelhmbfuwipvz
1 compromised version
- Jul 11, 2022
Malware in abujtyvrmnckiodq
1 compromised version
- Jul 11, 2022
Malicious code in ancdmoklxitjwqbf (npm)
- Jul 11, 2022
Malicious code in amknztsceqwgblou (npm)
- Jul 11, 2022
Malicious code in apzyjlbqwvkehmgo (npm)
- Jul 11, 2022
Malware in apzyjlbqwvkehmgo
1 compromised version
- Jul 11, 2022
Malware in ancdmoklxitjwqbf
1 compromised version
Page 7072 of 7,293