Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in domman (npm)
- Aug 14, 2025
Malicious code in domino-utils (npm)
- Aug 14, 2025
Malicious code in domains-client (npm)
- Aug 14, 2025
Malicious code in domainbox (npm)
- Aug 14, 2025
Malicious code in domain-name (npm)
- Aug 14, 2025
Malicious code in dom-style-parser (npm)
- Aug 14, 2025
Malicious code in dolphin-volcano-wuj367-project (npm)
- Aug 14, 2025
Malicious code in dolphin-savanna-bje485-project (npm)
- Aug 14, 2025
Malicious code in dolphin-quilt-ywr799-project (npm)
- Aug 14, 2025
Malicious code in dolphin-quagmire-xgc560-project (npm)
- Aug 14, 2025
Malicious code in dolphin-jasmine-xvn862-project (npm)
- Aug 14, 2025
Malicious code in dolphin-icicle-wnp515-project (npm)
- Aug 14, 2025
Malicious code in dolphin-hedgehog-fsk020-project (npm)
- Aug 14, 2025
Malicious code in dolphin-giraffe-pgx045-project (npm)
- Aug 14, 2025
Malicious code in dolphin-galaxy-agl545-project (npm)
- Aug 14, 2025
Malicious code in dolphin-dewdrop-hwu270-project (npm)
- Aug 14, 2025
Malicious code in dolphin-cloud-kqk279-project (npm)
- Aug 14, 2025
Malicious code in dolphin-asteroid-lhf553-project (npm)
- Aug 14, 2025
Malicious code in dolphin-ant-evx204-project (npm)
- Aug 14, 2025
Malicious code in dolphin-albatross-heu788-project (npm)
- Aug 14, 2025
Malicious code in dolomite-liquidator-subgraph (npm)
- Aug 14, 2025
Malicious code in dollarq (npm)
- Aug 14, 2025
Malicious code in dolfin (npm)
- Aug 14, 2025
Malicious code in dokray (npm)
- Aug 14, 2025
Malicious code in dohamark (npm)
- Aug 14, 2025
Malicious code in dogzhub (npm)
- Aug 14, 2025
Malicious code in dogwoome (npm)
- Aug 14, 2025
Malicious code in dogslots (npm)
- Aug 14, 2025
Malicious code in doglog (npm)
- Aug 14, 2025
Malicious code in doggytrip (npm)
- Aug 14, 2025
Malicious code in doggy-space-nft-collection946 (npm)
- Aug 14, 2025
Malicious code in doggy-space-nft-collection334 (npm)
- Aug 14, 2025
Malicious code in doggus (npm)
- Aug 14, 2025
Malicious code in dogclub (npm)
- Aug 14, 2025
Malicious code in dogage (npm)
- Aug 14, 2025
Malicious code in dog-iota-analyze-throw-kernel (npm)
- Aug 14, 2025
Malicious code in doedroid (npm)
- Aug 14, 2025
Malicious code in docxead (npm)
- Aug 14, 2025
Malicious code in docuwrite (npm)
- Aug 14, 2025
Malicious code in docusaurus-typeorm-jwt-gacrux (npm)
- Aug 14, 2025
Malicious code in docusaurus-transform-achernar-cosmos (npm)
- Aug 14, 2025
Malicious code in docusaurus-oberon-test-concurrently (npm)
- Aug 14, 2025
Malicious code in docusaurus-mantle-volcanology-entanglement (npm)
- Aug 14, 2025
Malicious code in docusaurus-jupiter-primatology-frontend (npm)
- Aug 14, 2025
Malicious code in docusaurus-cladistics-version-lacerta (npm)
- Aug 14, 2025
Malicious code in docusaurus-atlas-pm2-norma (npm)
- Aug 14, 2025
Malicious code in document.web.modules.files (npm)
- Aug 14, 2025
Malicious code in document-theme-daux-blue (npm)
- Aug 14, 2025
Malicious code in docued (npm)
- Aug 14, 2025
Malicious code in doctorme (npm)
Page 5619 of 6,634