Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in dxmbyouhpsgiltka (npm)
- Aug 14, 2025
Malicious code in dxjfnwthkpsvuzog (npm)
- Aug 14, 2025
Malicious code in dxfiles (npm)
- Aug 14, 2025
Malicious code in dxball (npm)
- Aug 14, 2025
Malicious code in dxahgyofjmlesnbr (npm)
- Aug 14, 2025
Malicious code in dwslibs (npm)
- Aug 14, 2025
Malicious code in dwellio (npm)
- Aug 14, 2025
Malicious code in dwarf-zamia-cpzy (npm)
- Aug 14, 2025
Malicious code in dwarf-whiskey-fpcz (npm)
- Aug 14, 2025
Malicious code in dwarf-orange-puti (npm)
- Aug 14, 2025
Malicious code in dwarf-lima-g526 (npm)
- Aug 14, 2025
Malicious code in dwarf-kangaroo-bfyu (npm)
- Aug 14, 2025
Malicious code in dwarf-jupiter-e8xo (npm)
- Aug 14, 2025
Malicious code in dwarf-echo-3jvk (npm)
- Aug 14, 2025
Malicious code in dwarf-eagle-is7f (npm)
- Aug 14, 2025
Malicious code in dwarf-dragonfruit-95wq (npm)
- Aug 14, 2025
Malicious code in dwarf-delta-yrzo (npm)
- Aug 14, 2025
Malicious code in dwarf-carrot-9tr9 (npm)
- Aug 14, 2025
Malicious code in dvrt-flux-react-router (npm)
- Aug 14, 2025
Malicious code in dvee3 (npm)
- Aug 14, 2025
Malicious code in dvdstore (npm)
- Aug 14, 2025
Malicious code in dvdrental (npm)
- Aug 14, 2025
Malicious code in duygusal (npm)
- Aug 14, 2025
Malicious code in duverger (npm)
- Aug 14, 2025
Malicious code in dusthelpers-supplement (npm)
- Aug 14, 2025
Malicious code in dusthelpers-onboarding (npm)
- Aug 14, 2025
Malicious code in dusk_rynw0_ewjbk_jewel (npm)
- Aug 14, 2025
Malicious code in dusk_75hjv_dbhkq_pine (npm)
- Aug 14, 2025
Malicious code in dusk_75hdw_bfic8_zenith (npm)
- Aug 14, 2025
Malicious code in dusk_6qvsq_mq3yi_kale (npm)
- Aug 14, 2025
Malicious code in dusk_2osvn_jw7zd_honey (npm)
- Aug 14, 2025
Malicious code in dusk-ogkuk-nvgzy-zenith-project (npm)
- Aug 14, 2025
Malicious code in dusk-lvvgg-m58r7-obsidian-project (npm)
- Aug 14, 2025
Malicious code in durex-app (npm)
- Aug 14, 2025
Malicious code in dupocracy (npm)
- Aug 14, 2025
Malicious code in duplex-electron-proxima-entanglement (npm)
- Aug 14, 2025
Malicious code in duokusdk (npm)
- Aug 14, 2025
Malicious code in duo-jsx (npm)
- Aug 14, 2025
Malicious code in dune-zenith-fpa351-project (npm)
- Aug 14, 2025
Malicious code in dune-vortex-usa796-project (npm)
- Aug 14, 2025
Malicious code in dune-unicorn-kyz189-project (npm)
- Aug 14, 2025
Malicious code in dune-u1esb-1ffug-quiver-project (npm)
- Aug 14, 2025
Malicious code in dune-sunset-wuw368-project (npm)
- Aug 14, 2025
Malicious code in dune-quasar-ozm188-project (npm)
- Aug 14, 2025
Malicious code in dune-peony-vnm107-project (npm)
- Aug 14, 2025
Malicious code in dune-opaline-fme342-project (npm)
- Aug 14, 2025
Malicious code in dune-opaline-anh944-project (npm)
- Aug 14, 2025
Malicious code in dune-lagoon-dbp673-project (npm)
- Aug 14, 2025
Malicious code in dune-kite-ybk457-project (npm)
- Aug 14, 2025
Malicious code in dune-jewel-rou942-project (npm)
Page 5611 of 6,634