Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 22, 2026
Malicious code in ndmckauxuoincv (npm)
1 compromised version
- Sep 22, 2026
Malicious code in ndmcjcxiebysfdb (npm)
3 compromised versions
- Sep 22, 2026
Malicious code in cloudndmcedu (npm)
1 compromised version
- Sep 22, 2026
Malware in ndmckauxuoincv
1 compromised version
- Sep 22, 2026
Malware in ndmcmsujey
1 compromised version
- Sep 22, 2026
Malware in ndmcjcxiebysfdb
1 compromised version
- Sep 22, 2026
Malware in cloudndmcedu
1 compromised version
- Sep 22, 2026
Malicious code in lufxchwmxwyps (npm)
2 compromised versions
- Sep 22, 2026
Malicious code in luftmvfiwgxydes (npm)
6 compromised versions
- Sep 22, 2026
Malicious code in kambxjowhdsgyw (npm)
3 compromised versions
- Sep 22, 2026
Malicious code in fdhcxvnwhjiofv (npm)
1 compromised version
- Sep 22, 2026
Malware in lufxchwmxwyps
1 compromised version
- Sep 22, 2026
Malware in kambxjowhdsgyw
1 compromised version
- Sep 22, 2026
Malware in luftmvfiwgxydes
1 compromised version
- Sep 22, 2026
Malware in fdhcxvnwhjiofv
1 compromised version
- Sep 22, 2026
Malicious code in oracle-redis (npm)
1 compromised version
- Sep 22, 2026
Malicious code in noverojava (npm)
2 compromised versions
- Sep 22, 2026
Malicious code in nodetokyo (npm)
1 compromised version
- Sep 22, 2026
Malware in @asdfaskdjfksadhfkasf/nadaver2
1 compromised version
- Sep 22, 2026
Malware in @uh-platform/cloud
1 compromised version
- Sep 22, 2026
Malware in @uh-platform/nadaver2
1 compromised version
- Sep 22, 2026
Malware in @uh-platform/nadaver
1 compromised version
- Sep 22, 2026
Malware in @uol-afiliados/affiliated-config-lib
1 compromised version
- Sep 22, 2026
Malware in @uh-platform/domain-widget
1 compromised version
- Sep 22, 2026
Malware in @uh-platform/webcard
1 compromised version
- Sep 22, 2026
Malicious code in zeal-utils (npm)
1 compromised version
- Sep 22, 2026
Malicious code in zeal-util-hooks (npm)
1 compromised version
- Sep 22, 2026
Malicious code in style-class-utils (npm)
1 compromised version
- Sep 22, 2026
Malicious code in speaker_tagging_media_player (npm)
1 compromised version
- Sep 22, 2026
Malicious code in spark-rpc (npm)
1 compromised version
- Sep 22, 2026
Malicious code in spark-common (npm)
1 compromised version
- Sep 22, 2026
Malicious code in mx-www-locales-common (npm)
1 compromised version
- Sep 22, 2026
Malicious code in mercuriusdream-oidc-replay-probe (npm)
1 compromised version
- Sep 22, 2026
Malicious code in eslint-config-compact-utils (npm)
2 compromised versions
- Sep 22, 2026
Malicious code in halali-sample (npm)
1 compromised version
- Sep 22, 2026
Malicious code in exodus-firestore-synchronize (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @yuva2210/poc-depconf (npm)
2 compromised versions
- Sep 22, 2026
Malicious code in @yuva2210/okx-poc-preinstall (npm)
2 compromised versions
- Sep 22, 2026
Malicious code in @ssgw/background-transition (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @larocas-bbresearch/tp-probe-e29834ce (npm)
2 compromised versions
- Sep 22, 2026
Malicious code in @larocas-bbresearch/tp-probe-dc7a3670 (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @larocas-bbresearch/tombstone-probe-odvz5y (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @ks-cqc/h5-sig4 (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @ks-cqc/fingerprint-generator (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @egencia/uitk-react-text (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @egencia/uitk-react-spacing (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @egencia/uitk-react-layout-flex (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @egencia/uitk-react-foundation (npm)
1 compromised version
Page 76 of 7,312