Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jul 11, 2022
Malware in iztysrkjocvafqpb
1 compromised version
- Jul 11, 2022
Malicious code in jdvtfcumpwzaxgyr (npm)
- Jul 11, 2022
Malicious code in jckfwvyzmkdibnlo (npm)
- Jul 11, 2022
Malware in jdvtfcumpwzaxgyr
1 compromised version
- Jul 11, 2022
Malware in jckfwvyzmkdibnlo
1 compromised version
- Jul 11, 2022
Malicious code in kgfocqmbyvdsnhlw (npm)
- Jul 11, 2022
Malicious code in kflztgcydoprquhm (npm)
- Jul 11, 2022
Malicious code in kdswmlvbytpczrgn (npm)
- Jul 11, 2022
Malware in kflztgcydoprquhm
1 compromised version
- Jul 11, 2022
Malware in kgfocqmbyvdsnhlw
1 compromised version
- Jul 11, 2022
Malware in kdswmlvbytpczrgn
1 compromised version
- Jul 11, 2022
Malicious code in lmpcrfdnkyzehtja (npm)
- Jul 11, 2022
Malicious code in ligtpbhqmvnkofkz (npm)
- Jul 11, 2022
Malware in lmpcrfdnkyzehtja
1 compromised version
- Jul 11, 2022
Malware in ligtpbhqmvnkofkz
1 compromised version
- Jul 11, 2022
Malicious code in luhrfzvejsgcakmb (npm)
- Jul 11, 2022
Malicious code in lpjywdvkabfnczui (npm)
- Jul 11, 2022
Malicious code in lozyrnvqwesducxi (npm)
- Jul 11, 2022
Malware in luhrfzvejsgcakmb
1 compromised version
- Jul 11, 2022
Malware in lpjywdvkabfnczui
1 compromised version
- Jul 11, 2022
Malware in lozyrnvqwesducxi
1 compromised version
- Jul 11, 2022
Malicious code in lsdomtzngxpbjkea (npm)
- Jul 11, 2022
Malicious code in lqwdgtrfmkzeaohi (npm)
- Jul 11, 2022
Malware in lsdomtzngxpbjkea
1 compromised version
- Jul 11, 2022
Malware in lqwdgtrfmkzeaohi
1 compromised version
- Jul 11, 2022
Malicious code in lvcahgmwzkduejrt (npm)
- Jul 11, 2022
Malware in lvcahgmwzkduejrt
1 compromised version
- Jul 11, 2022
Malicious code in ltpmhgzfxqbkdive (npm)
- Jul 11, 2022
Malware in ltpmhgzfxqbkdive
1 compromised version
- Jul 11, 2022
Malicious code in lzjeoqbcmfigadny (npm)
- Jul 11, 2022
Malware in lzjeoqbcmfigadny
1 compromised version
- Jul 11, 2022
Malicious code in mflxtioqpeahbkzk (npm)
- Jul 11, 2022
Malware in mflxtioqpeahbkzk
1 compromised version
- Jul 11, 2022
Malicious code in msdqlkkuajnbihez (npm)
- Jul 11, 2022
Malicious code in msbaqkhuzxgjprfn (npm)
- Jul 11, 2022
Malware in msdqlkkuajnbihez
1 compromised version
- Jul 11, 2022
Malware in msbaqkhuzxgjprfn
1 compromised version
- Jul 11, 2022
Malicious code in nxyumfgktakjqzlw (npm)
- Jul 11, 2022
Malware in nxyumfgktakjqzlw
1 compromised version
- Jul 11, 2022
Malicious code in mxfbjcytisrkuzva (npm)
- Jul 11, 2022
Malware in mxfbjcytisrkuzva
1 compromised version
- Jul 11, 2022
Malicious code in rconufmwksaqdgze (npm)
- Jul 11, 2022
Malicious code in qdzkykcwfrmasjbi (npm)
- Jul 11, 2022
Malicious code in qdobjtihkplyzuwf (npm)
- Jul 11, 2022
Malware in rconufmwksaqdgze
1 compromised version
- Jul 11, 2022
Malware in qdobjtihkplyzuwf
1 compromised version
- Jul 11, 2022
Malware in qdzkykcwfrmasjbi
1 compromised version
- Jul 11, 2022
Malicious code in rexivynfjbdlpakm (npm)
- Jul 11, 2022
Malware in rexivynfjbdlpakm
1 compromised version
- Jul 11, 2022
Malicious code in rdjwbzasfgvktock (npm)
Page 7082 of 7,293