Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in drawon (npm)
- Aug 14, 2025
Malicious code in drawoid (npm)
- Aug 14, 2025
Malicious code in drawingps (npm)
- Aug 14, 2025
Malicious code in draugur (npm)
- Aug 14, 2025
Malicious code in drangula (npm)
- Aug 14, 2025
Malicious code in dragula.js (npm)
- Aug 14, 2025
Malicious code in dragstrip (npm)
- Aug 14, 2025
Malicious code in dragro (npm)
- Aug 14, 2025
Malicious code in dragonfruit-uniform-2lp9 (npm)
- Aug 14, 2025
Malicious code in dragonfruit-temple-xmjg (npm)
- Aug 14, 2025
Malicious code in dragonfruit-nutmeg-ux48 (npm)
- Aug 14, 2025
Malicious code in dragonfruit-nightingale-lu3u (npm)
- Aug 14, 2025
Malicious code in dragonfruit-kapok-vgnu (npm)
- Aug 14, 2025
Malicious code in dragonfruit-kangaroo-luuf (npm)
- Aug 14, 2025
Malicious code in dragonfruit-india-rs59 (npm)
- Aug 14, 2025
Malicious code in dragonfruit-bark-ysow (npm)
- Aug 14, 2025
Malicious code in dragonbar (npm)
- Aug 14, 2025
Malicious code in dragon-zenith-fpi840-project (npm)
- Aug 14, 2025
Malicious code in dragon-yawn-ngv292-project (npm)
- Aug 14, 2025
Malicious code in dragon-yawn-cfm890-project (npm)
- Aug 14, 2025
Malicious code in dragon-xylophone-bvv149-project (npm)
- Aug 14, 2025
Malicious code in dragon-willow-wls785-project (npm)
- Aug 14, 2025
Malicious code in dragon-whirlpool-sze629-project (npm)
- Aug 14, 2025
Malicious code in dragon-tulip-ulh458-project (npm)
- Aug 14, 2025
Malicious code in dragon-penguin-akk736-project (npm)
- Aug 14, 2025
Malicious code in dragon-peacock-glm385-project (npm)
- Aug 14, 2025
Malicious code in dragon-kale-rax096-project (npm)
- Aug 14, 2025
Malicious code in dragon-infinity-fnk008-project (npm)
- Aug 14, 2025
Malicious code in dragon-hill-dkg047-project (npm)
- Aug 14, 2025
Malicious code in dragon-grove-xpg303-project (npm)
- Aug 14, 2025
Malicious code in dragon-grove-qxk798-project (npm)
- Aug 14, 2025
Malicious code in dragon-forest-qha399-project (npm)
- Aug 14, 2025
Malicious code in dragon-dandelion-jqd178-project (npm)
- Aug 14, 2025
Malicious code in dragon-blossom-pvr257-project (npm)
- Aug 14, 2025
Malicious code in dragon-amber-tpi790-project (npm)
- Aug 14, 2025
Malicious code in dragduino (npm)
- Aug 14, 2025
Malicious code in dragand-subtitle-plugin (npm)
- Aug 14, 2025
Malicious code in dragand-player-plugin (npm)
- Aug 14, 2025
Malicious code in dragand-fileinfo-plugin (npm)
- Aug 14, 2025
Malicious code in drafteo (npm)
- Aug 14, 2025
Malicious code in draft-js-sticker-plugin-vixlet (npm)
- Aug 14, 2025
Malicious code in draft-js-mention-plugin-vixlet (npm)
- Aug 14, 2025
Malicious code in draco-private-loop-vega (npm)
- Aug 14, 2025
Malicious code in draco-parallax-mineralogy-quantum (npm)
- Aug 14, 2025
Malicious code in draco-optimize-css-assets-webpack-plugin-proxima-nconf (npm)
- Aug 14, 2025
Malicious code in draco-nconf-callisto-cygnus (npm)
- Aug 14, 2025
Malicious code in draco-lacerta-process-semantic-ui (npm)
- Aug 14, 2025
Malicious code in draco-altair-sirius-jest (npm)
- Aug 14, 2025
Malicious code in dr-service-ecosystem (npm)
- Aug 14, 2025
Malicious code in dr-logger-client (npm)
Page 5616 of 6,634