Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in mrfisher (npm)
- Aug 14, 2025
Malicious code in mqtt_plugin (npm)
- Aug 14, 2025
Malicious code in mpublic (npm)
- Aug 14, 2025
Malicious code in mpochowskiserv (npm)
- Aug 14, 2025
Malicious code in mplayer-binary-win32 (npm)
- Aug 14, 2025
Malicious code in mphoto (npm)
- Aug 14, 2025
Malicious code in mpfysnhgltrvdaei (npm)
- Aug 14, 2025
Malicious code in mperham (npm)
- Aug 14, 2025
Malicious code in mpdncbtwfkvoajuy (npm)
- Aug 14, 2025
Malicious code in mpctouch (npm)
- Aug 14, 2025
Malicious code in mpat-frontend (npm)
- Aug 14, 2025
Malicious code in mp3s (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-the-liberty-of-norton-folgate-5wxzq-azpyay (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-black-one-ku2xp-tefjgp (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-82223-cage-tropical-48dqs-lilnlq (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-6863-lp5-h6rvm-mfjeql (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-459867-forgiveness-3nns7-tralfe (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-37823-billys-live-bait-gqddl-gymxld (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-34920-albatross-8rmsa-ghzpzl (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-314931-strawberry-mansion-blqz5-upygue (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa (npm)
- MAL-2025-26803Malwarenpmmp3-file-zip-d-ownload-2021-390205-the-million-things-that-never-happened-o4c7i-uqspupAug 14, 2025
Malicious code in mp3-file-zip-d-ownload-2021-390205-the-million-things-that-never-happened-o4c7i-uqspup (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-109598-were-not-talking-thl8a-vosqbj (npm)
- Aug 14, 2025
Malicious code in mp3-file-zip-d-ownload-10788-too-rye-ay-2wcus-xztuui (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-take-them-on-on-your-own-hrfix-cczgww (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-movement-aw881-vcidcm (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-i-can-hear-the-heart-beating-as-one-sdcg3-rzkefk (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-64137-farewell-angelina-yqzpn-ejtwsd (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-60280-lay-down-and-love-it-live-yfkc2-lppmhd (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-56558-hooray-for-tuesday-1cdzh-nforeu (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-30879-fight-less-win-more-xgv8l-jeyujj (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-2013-9608-coming-apart-gseiz-listpz (npm)
- MAL-2025-26791Malwarenpmmp3-do-wnload-file-to-day-179158-if-youre-going-to-the-city-a-tribute-to-mose-allison-5ahsk-gfbljgAug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-179158-if-youre-going-to-the-city-a-tribute-to-mose-allison-5ahsk-gfbljg (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-143363-green-and-gray-qh3gk-eijkct (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-13796-flick-the-vs-isfeh-rasowi (npm)
- Aug 14, 2025
Malicious code in mp3-do-wnload-file-to-day-116611-strong-arm-of-the-law-vu3r7-gbcocp (npm)
- Aug 14, 2025
Malicious code in mozik-ext-bitbucket (npm)
- Aug 14, 2025
Malicious code in mozijk (npm)
- Aug 14, 2025
Malicious code in mozevents (npm)
- Aug 14, 2025
Malicious code in mozer-avator (npm)
- Aug 14, 2025
Malicious code in mozer-avatar (npm)
- Aug 14, 2025
Malicious code in mozdef (npm)
- Aug 14, 2025
Malicious code in mozaik-ext-jiraagile (npm)
- Aug 14, 2025
Malicious code in mozaik-ext-jira-agile (npm)
- Aug 14, 2025
Malicious code in mozaik-ext-git (npm)
- Aug 14, 2025
Malicious code in moxilua (npm)
- Aug 14, 2025
Malicious code in mowopo (npm)
- Aug 14, 2025
Malicious code in MovieJS (npm)
- Aug 14, 2025
Malicious code in movesio (npm)
Page 5455 of 6,634