Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,322 total in npm · sorted newest first- Aug 14, 2025
Malicious code in zip-mp3-a-lbum-do-wnload-new-31841-my-melody-4etja-ihiwfy (npm)
- Aug 14, 2025
Malicious code in zip-mp3-a-lbum-do-wnload-new-30064-parable-of-arable-land-qdx68-yqscwl (npm)
- Aug 14, 2025
Malicious code in zip-mp3-a-lbum-do-wnload-new-261840-agita-cdf7d-jovypl (npm)
- Aug 14, 2025
Malicious code in zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir (npm)
- Aug 14, 2025
Malicious code in zip-mp3-a-lbum-do-wnload-new-24431-scorpio-rising-n2jox-rfxhqe (npm)
- Aug 14, 2025
Malicious code in zip-mp3-a-lbum-do-wnload-new-231192-punisher-xzwqi-aaagvn (npm)
- MAL-2025-41001Malwarenpmzip-mp3-a-lbum-do-wnload-new-2017-68384-music-to-draw-to-satellite-6dqyd-obztmrAug 14, 2025
Malicious code in zip-mp3-a-lbum-do-wnload-new-2017-68384-music-to-draw-to-satellite-6dqyd-obztmr (npm)
- Aug 14, 2025
Malicious code in zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq (npm)
- Aug 14, 2025
Malicious code in zip-mp3-a-lbum-do-wnload-new-10692-xxxx-kh2rm-pfurnp (npm)
- Aug 14, 2025
Malicious code in zionapp (npm)
- Aug 14, 2025
Malicious code in zintutest (npm)
- Aug 14, 2025
Malicious code in zinnia_y1ogc_uiuw5_firefly (npm)
- Aug 14, 2025
Malicious code in zinnia_tsnvi_7sgw8_quasar (npm)
- Aug 14, 2025
Malicious code in zinnia_qxoyr_y0hwo_jasmine (npm)
- Aug 14, 2025
Malicious code in zinnia_hobs6_weef6_jungle (npm)
- Aug 14, 2025
Malicious code in zinnia_ewxcy_whjjp_illusion (npm)
- Aug 14, 2025
Malicious code in zinnia_9kjzk_1b9ec_raven (npm)
- Aug 14, 2025
Malicious code in zimtools (npm)
- Aug 14, 2025
Malicious code in zimclick (npm)
- Aug 14, 2025
Malicious code in ziggurat-whiskey-vv1n (npm)
- Aug 14, 2025
Malicious code in ziggurat-underpass-cefw (npm)
- Aug 14, 2025
Malicious code in ziggurat-juliet-pmct (npm)
- Aug 14, 2025
Malicious code in ziggurat-heliosphere-gjhl (npm)
- Aug 14, 2025
Malicious code in ziggurat-drone-stuh (npm)
- Aug 14, 2025
Malicious code in ziggurat-castle-zxpd (npm)
- Aug 14, 2025
Malicious code in ziggurat-car-sgp9 (npm)
- Aug 14, 2025
Malicious code in zhupeng (npm)
- Aug 14, 2025
Malicious code in zhujiu-lunziwei-shang (npm)
- Aug 14, 2025
Malicious code in zhuanzhedian (npm)
- Aug 14, 2025
Malicious code in zhounayu-shiyong-yinpan-qimen (npm)
- Aug 14, 2025
Malicious code in zhongzhoupai-ziwei-doushu-shenzao-jiangyi-shang (npm)
- Aug 14, 2025
Malicious code in zhongzhoupai-ziwei-doushu-chuji-jiangyi (npm)
- Aug 14, 2025
Malicious code in zhizhe-leshui (npm)
- Aug 14, 2025
Malicious code in zhimaoyi (npm)
- Aug 14, 2025
Malicious code in zhihu-scaffold (npm)
- Aug 14, 2025
Malicious code in zhalin (npm)
- Aug 14, 2025
Malicious code in zgpg (npm)
- Aug 14, 2025
Malicious code in zgmdwnkqvlorjeuh (npm)
- Aug 14, 2025
Malicious code in zg-rshare (npm)
- Aug 14, 2025
Malicious code in zg-rentals (npm)
- Aug 14, 2025
Malicious code in zfsdump (npm)
- Aug 14, 2025
Malicious code in zeussql (npm)
- Aug 14, 2025
Malicious code in zeuscart (npm)
- Aug 14, 2025
Malicious code in zetruc (npm)
- Aug 14, 2025
Malicious code in zetafibo (npm)
- Aug 14, 2025
Malicious code in zeta-uglify-serialize-finally-gamma (npm)
- Aug 14, 2025
Malicious code in zeta-node-alpha-link-reject (npm)
- Aug 14, 2025
Malicious code in zeta-fire-throw-dog-encode (npm)
- Aug 14, 2025
Malicious code in zestcoin (npm)
- Aug 14, 2025
Malicious code in zest-yurt-v21j (npm)
Page 5204 of 6,667