Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in ohbhee
1 compromised version
- Jun 20, 2022
Malware in lint-staged-var
1 compromised version
- Jun 20, 2022
Malicious code in strip-umer (npm)
- Jun 20, 2022
Malicious code in d1tm3nemodark (npm)
- Jun 20, 2022
Malicious code in calc-n3mo-69 (npm)
- Jun 20, 2022
Malware in calc-n3mo-69
1 compromised version
- Jun 20, 2022
Malware in d1tm3nemodark
1 compromised version
- Jun 20, 2022
Malware in strip-umer
1 compromised version
- Jun 20, 2022
Malicious code in calc_ph6avsgeed (npm)
- Jun 20, 2022
Malicious code in calc_ordnk0bfou (npm)
- Jun 20, 2022
Malicious code in calc_m4nr0eonhd (npm)
- Jun 20, 2022
Malicious code in calc_9p1qriho8q (npm)
- Jun 20, 2022
Malware in calc_9p1qriho8q
1 compromised version
- Jun 20, 2022
Malware in calc_m4nr0eonhd
1 compromised version
- Jun 20, 2022
Malware in calc_ordnk0bfou
1 compromised version
- Jun 20, 2022
Malware in calc_ph6avsgeed
1 compromised version
- Jun 20, 2022
Malicious code in internal_pkg_for_verd (npm)
- Jun 20, 2022
Malicious code in internal_org_dependency (npm)
- Jun 20, 2022
Malicious code in calc_tj7r6uk4vf (npm)
- Jun 20, 2022
Malicious code in calc_fh2qxzsj7s (npm)
- Jun 20, 2022
Malware in calc_tj7r6uk4vf
1 compromised version
- Jun 20, 2022
Malware in internal_pkg_for_verd
1 compromised version
- Jun 20, 2022
Malware in calc_fh2qxzsj7s
1 compromised version
- Jun 20, 2022
Malware in internal_org_dependency
1 compromised version
- Jun 20, 2022
Malicious code in calc_sy1m2urjh4 (npm)
- Jun 20, 2022
Malicious code in calc_prn3ueihh9 (npm)
- Jun 20, 2022
Malicious code in calc_e01qd8xyxz (npm)
- Jun 20, 2022
Malicious code in calc_a55qzguqh3 (npm)
- Jun 20, 2022
Malicious code in calc_9nn9nyr9bd (npm)
- Jun 20, 2022
Malware in calc_prn3ueihh9
1 compromised version
- Jun 20, 2022
Malware in calc_e01qd8xyxz
1 compromised version
- Jun 20, 2022
Malware in calc_a55qzguqh3
1 compromised version
- Jun 20, 2022
Malware in calc_9nn9nyr9bd
1 compromised version
- Jun 20, 2022
Malware in calc_sy1m2urjh4
1 compromised version
- Jun 20, 2022
Malicious code in calc_zf0nakil18 (npm)
- Jun 20, 2022
Malicious code in calc_wqq3wgo8y9 (npm)
- Jun 20, 2022
Malicious code in calc_sbqwv1qkzg (npm)
- Jun 20, 2022
Malicious code in calc_fspq574if2 (npm)
- Jun 20, 2022
Malicious code in calc_bc8zluyekj (npm)
- Jun 20, 2022
Malware in calc_wqq3wgo8y9
1 compromised version
- Jun 20, 2022
Malware in calc_bc8zluyekj
1 compromised version
- Jun 20, 2022
Malware in calc_zf0nakil18
1 compromised version
- Jun 20, 2022
Malware in calc_fspq574if2
1 compromised version
- Jun 20, 2022
Malware in calc_sbqwv1qkzg
1 compromised version
- Jun 20, 2022
Malicious code in calc_qq9esg40er (npm)
- Jun 20, 2022
Malicious code in calc_8kp8btogfy (npm)
- Jun 20, 2022
Malicious code in calc_545f8kcu2j (npm)
- Jun 20, 2022
Malware in calc_545f8kcu2j
1 compromised version
- Jun 20, 2022
Malware in calc_8kp8btogfy
1 compromised version
- Jun 20, 2022
Malware in calc_qq9esg40er
1 compromised version
Page 7162 of 7,293