Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in docs-reminder-action (npm)
- Aug 14, 2025
Malicious code in docpeek (npm)
- Aug 14, 2025
Malicious code in doclanes (npm)
- Aug 14, 2025
Malicious code in docksy (npm)
- Aug 14, 2025
Malicious code in dock-yew-2lx8 (npm)
- Aug 14, 2025
Malicious code in dock-temple-q5bc (npm)
- Aug 14, 2025
Malicious code in dock-teak-dxz6 (npm)
- Aug 14, 2025
Malicious code in dock-orbit-na1g (npm)
- Aug 14, 2025
Malicious code in dock-jetty-gjfr (npm)
- Aug 14, 2025
Malicious code in docintel (npm)
- Aug 14, 2025
Malicious code in docin-cli (npm)
- Aug 14, 2025
Malicious code in docbench (npm)
- Aug 14, 2025
Malicious code in docbankedit (npm)
- Aug 14, 2025
Malicious code in doca-cf-theme (npm)
- Aug 14, 2025
Malicious code in doc-smith (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-silver-age-3ul9y-rzorsr (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-replica-ftpb8-iuhfqd (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-out-of-the-game-l7no5-nzaaod (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-mens-needs-womens-needs-whatever-egojv-aclbsw (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-heres-to-taking-it-easy-aq630-dofqws (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-all-6s-and-7s-gwvcm-sezkzx (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-61376-domestic-blues-d3hzx-yovkzp (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-5896-swordfishtrombones-f0r65-ohpily (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-525005-hysteria-xkreg-qguide (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-36615-big-shiny-cars-skip6-dggtzj (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-31661-you-cant-stop-rock-n-roll-effcx-fwrjur (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-156615-emerald-classics-1bifx-rttcji (npm)
- Aug 14, 2025
Malicious code in do-wnload-available-135622-de-facto-s0jrf-jhgphg (npm)
- Aug 14, 2025
Malicious code in dns-detect (npm)
- Aug 14, 2025
Malicious code in dnkawmyucjhlsrxo (npm)
- Aug 14, 2025
Malicious code in dnbwyy (npm)
- Aug 14, 2025
Malicious code in dmstools (npm)
- Aug 14, 2025
Malicious code in dmp-web (npm)
- Aug 14, 2025
Malicious code in dmodcode (npm)
- Aug 14, 2025
Malicious code in dminiwm (npm)
- Aug 14, 2025
Malicious code in dmhjwnqsufoblkrk (npm)
- Aug 14, 2025
Malicious code in dmension (npm)
- Aug 14, 2025
Malicious code in dmedia (npm)
- Aug 14, 2025
Malicious code in dme2-js-client (npm)
- Aug 14, 2025
Malicious code in dmcnicks (npm)
- Aug 14, 2025
Malicious code in dmarnis (npm)
- Aug 14, 2025
Malicious code in dls23-unlimited-ads--dls23-unlimited-ads-with (npm)
- Aug 14, 2025
Malicious code in dlrepo (npm)
- Aug 14, 2025
Malicious code in dlmuohsibyezakkn (npm)
- Aug 14, 2025
Malicious code in dlectron (npm)
- Aug 14, 2025
Malicious code in dlamandra (npm)
- Aug 14, 2025
Malicious code in dl-fb (npm)
- Aug 14, 2025
Malicious code in dkwftekbyslpgajz (npm)
- Aug 14, 2025
Malicious code in dktzmpcuwgihofvy (npm)
Page 5620 of 6,634