Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in dsfserewkbaaam (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaal (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaak (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaaj (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaai (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaah (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaag (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaaf (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaae (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaad (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaac (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaab (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaaa4 (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaaa3 (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaaa2 (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaaa1 (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaaa (npm)
- Aug 14, 2025
Malicious code in dsfserewkbaa (npm)
- Aug 14, 2025
Malicious code in dsfserewkba (npm)
- Aug 14, 2025
Malicious code in dsfserewkb (npm)
- Aug 14, 2025
Malicious code in dsfserewka (npm)
- Aug 14, 2025
Malicious code in dsfee12 (npm)
- Aug 14, 2025
Malicious code in dsfdsfa (npm)
- Aug 14, 2025
Malicious code in dsdsadsafadadfsfad (npm)
- Aug 14, 2025
Malicious code in dscieoxtkrguqjpf (npm)
- Aug 14, 2025
Malicious code in ds334 (npm)
- Aug 14, 2025
Malicious code in ds22b3 (npm)
- Aug 14, 2025
Malicious code in drystal (npm)
- Aug 14, 2025
Malicious code in dryetchui (npm)
- Aug 14, 2025
Malicious code in drutnet (npm)
- Aug 14, 2025
Malicious code in drupsnipe (npm)
- Aug 14, 2025
Malicious code in druproid (npm)
- Aug 14, 2025
Malicious code in drupalsib (npm)
- Aug 14, 2025
Malicious code in drupal-bower-install (npm)
- Aug 14, 2025
Malicious code in drumbox (npm)
- Aug 14, 2025
Malicious code in drugmatch (npm)
- Aug 14, 2025
Malicious code in drscomm (npm)
- Aug 14, 2025
Malicious code in dropitapp (npm)
- Aug 14, 2025
Malicious code in dropgal (npm)
- Aug 14, 2025
Malicious code in dropcrypt (npm)
- Aug 14, 2025
Malicious code in dropchat (npm)
- Aug 14, 2025
Malicious code in dropbox-api-v2-explorer (npm)
- Aug 14, 2025
Malicious code in droonga (npm)
- Aug 14, 2025
Malicious code in drone-yambean-ag2y (npm)
- Aug 14, 2025
Malicious code in drone-shack-171j (npm)
- Aug 14, 2025
Malicious code in drone-rainbow-u5y0 (npm)
- Aug 14, 2025
Malicious code in drone-quebec-zzli (npm)
- Aug 14, 2025
Malicious code in drone-mountain-dvij (npm)
- Aug 14, 2025
Malicious code in drone-lima-ghpf (npm)
- Aug 14, 2025
Malicious code in drone-kapok-6y1z (npm)
Page 5614 of 6,634