Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in dpscope (npm)
- Aug 14, 2025
Malicious code in dpdraft (npm)
- Aug 14, 2025
Malicious code in dpanneur (npm)
- Aug 14, 2025
Malicious code in doxmaster (npm)
- Aug 14, 2025
Malicious code in down-tanker (npm)
- Aug 14, 2025
Malicious code in down-load-now-9a82i-vc3fui (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-youre-living-all-over-me-pztzf-cdpxrz (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-working-on-a-dream-i6op6-jjzcyy (npm)
- MAL-2025-18715Malwarenpmdown-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfrAug 14, 2025
Malicious code in down-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfr (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-researching-the-blues-n3biv-klnohu (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-in-evening-air-h64zx-skufkw (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-9963-decemberunderground-v5ico-vdkxyl (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-8393-wait-for-me-jdvqg-evxzsz (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-47073-anita-qnknl-xgxkin (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-246213-articulation-ezaoj-nnjghf (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-242367-fad-bpemi-awgouw (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-18341-x-xcib7-hnjfai (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-113116-at-weddings-wpwot-cqpsxb (npm)
- Aug 14, 2025
Malicious code in down-load-available-songs-in-the-key-of-life-1-0w495-lciybu (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-i-am-the-fun-blame-monster-31e3h-wgxkex (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-90774-post-self-c09pn-xqmqrm (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-7728-at-action-park-hda4o-dpbnxo (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-7211-chaos-and-creation-in-the-backyard-ovx5z-nuduuf (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-52887-pawn-hearts-4duor-thjpkj (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-37967-duality-g5efy-wezkck (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-306862-as-days-get-dark-gvxck-huukyv (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-29419-fresh-fw9li-qdnrma (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-261895-fake-it-flowers-fr14h-gmqthe (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-122443-vibrations-1-nvkcw-inalaf (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-114887-here-from-where-we-are-16l6t-tyjpcw (npm)
- Aug 14, 2025
Malicious code in dove-yawn-krp762-project (npm)
- Aug 14, 2025
Malicious code in dove-whirlpool-vlb086-project (npm)
- Aug 14, 2025
Malicious code in dove-savanna-unm849-project (npm)
- Aug 14, 2025
Malicious code in dove-quail-ltm153-project (npm)
- Aug 14, 2025
Malicious code in dove-lagoon-may685-project (npm)
- Aug 14, 2025
Malicious code in dove-iguana-tgy033-project (npm)
- Aug 14, 2025
Malicious code in dove-horizon-vaz208-project (npm)
- Aug 14, 2025
Malicious code in dove-hammock-sio879-project (npm)
- Aug 14, 2025
Malicious code in dove-frost-wrh593-project (npm)
- Aug 14, 2025
Malicious code in dove-eagle-ilq381-project (npm)
- Aug 14, 2025
Malicious code in dove-crystal-kwd785-project (npm)
- Aug 14, 2025
Malicious code in dove-bonfire-vod852-project (npm)
- Aug 14, 2025
Malicious code in dove-blossom-swe867-project (npm)
- Aug 14, 2025
Malicious code in douquan (npm)
- Aug 14, 2025
Malicious code in doufuru (npm)
- Aug 14, 2025
Malicious code in double-string-log-test-assert (npm)
- Aug 14, 2025
Malicious code in dotyar (npm)
- Aug 14, 2025
Malicious code in dotenv-socketio-ichnology-higgs (npm)
Page 5617 of 6,634