Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jul 11, 2022
Malware in umbqstxngoajrkpi
1 compromised version
- Jul 11, 2022
Malicious code in vikcbhnystduflja (npm)
- Jul 11, 2022
Malicious code in umyqzkbhnjrgxscp (npm)
- Jul 11, 2022
Malware in umyqzkbhnjrgxscp
1 compromised version
- Jul 11, 2022
Malware in vikcbhnystduflja
1 compromised version
- Jul 11, 2022
Malicious code in vkchtoewspkjrfld (npm)
- Jul 11, 2022
Malware in vkchtoewspkjrfld
1 compromised version
- Jul 11, 2022
Malicious code in vjlruxeiqtanmkoy (npm)
- Jul 11, 2022
Malware in vjlruxeiqtanmkoy
1 compromised version
- Jul 11, 2022
Malicious code in vutnobryefzkjahl (npm)
- Jul 11, 2022
Malware in vutnobryefzkjahl
1 compromised version
- Jul 11, 2022
Malicious code in vxjhrydsqgpuobkf (npm)
- Jul 11, 2022
Malware in vxjhrydsqgpuobkf
1 compromised version
- Jul 11, 2022
Malicious code in wtbgzojhaiyermqk (npm)
- Jul 11, 2022
Malicious code in wrtpnhsguambxvkl (npm)
- Jul 11, 2022
Malware in wrtpnhsguambxvkl
1 compromised version
- Jul 11, 2022
Malware in wtbgzojhaiyermqk
1 compromised version
- Jul 11, 2022
Malicious code in wuoxgfrsikzvpdjm (npm)
- Jul 11, 2022
Malware in wuoxgfrsikzvpdjm
1 compromised version
- Jul 11, 2022
Malicious code in xascmlwhokkitdpz (npm)
- Jul 11, 2022
Malware in xascmlwhokkitdpz
1 compromised version
- Jul 11, 2022
Malicious code in xbsrnfhgmvzuowpa (npm)
- Jul 11, 2022
Malware in xbsrnfhgmvzuowpa
1 compromised version
- Jul 11, 2022
Malicious code in xenhtdmqjyzkrlbi (npm)
- Jul 11, 2022
Malware in xenhtdmqjyzkrlbi
1 compromised version
- Jul 11, 2022
Malicious code in xfjokryqncigbezs (npm)
- Jul 11, 2022
Malware in xfjokryqncigbezs
1 compromised version
- Jul 8, 2022
Malicious code in vue3-babel-js (npm)
- Jul 8, 2022
Malware in vue3-babel-js
1 compromised version
- Jul 8, 2022
Malicious code in @puresec/addressparser-malicious (npm)
- Jul 8, 2022
Malware in @puresec/addressparser-malicious
1 compromised version
- Jul 8, 2022
Malicious code in compromised-npm-package (npm)
- Jul 8, 2022
Malware in compromised-npm-package
1 compromised version
- Jul 8, 2022
Malicious code in @tickertape/protos-pbjs (npm)
- Jul 8, 2022
Malware in @tickertape/protos-pbjs
1 compromised version
- Jul 8, 2022
Malicious code in chart.js-legacy (npm)
- Jul 8, 2022
Malware in chart.js-legacy
1 compromised version
- Jul 8, 2022
Malicious code in axiom-base (npm)
- Jul 8, 2022
Malware in axiom-base
1 compromised version
- Jul 8, 2022
Malicious code in npm_jithin_package (npm)
- Jul 8, 2022
Malicious code in arc-canonical (npm)
- Jul 8, 2022
Malware in arc-canonical
1 compromised version
- Jul 8, 2022
Malware in npm_jithin_package
1 compromised version
- Jul 8, 2022
Malicious code in nexus-snyk-security-plugin (npm)
- Jul 8, 2022
Malware in nexus-snyk-security-plugin
1 compromised version
- Jul 8, 2022
Malicious code in install-matlab (npm)
- Jul 8, 2022
Malware in install-matlab
1 compromised version
- Jul 8, 2022
Malicious code in pratikyadavh1 (npm)
- Jul 8, 2022
Malware in pratikyadavh1
1 compromised version
- Jul 8, 2022
Malicious code in tmeme (npm)
Page 7084 of 7,293