Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,500 total in npm · sorted newest first- Aug 14, 2025
Malicious code in dynamo-x9oeo-poe19-horizon-project (npm)
- Aug 14, 2025
Malicious code in dynamo-r1fvy-txt19-yarn-project (npm)
- Aug 14, 2025
Malicious code in dynamo-brane-mechatronics-aether (npm)
- Aug 14, 2025
Malicious code in dynamo-asthenosphere-protractor-phoebe (npm)
- Aug 14, 2025
Malicious code in dynamic-import-webpack (npm)
1 compromised version
- Aug 14, 2025
Malicious code in dynamic-form-components (npm)
- Aug 14, 2025
Malicious code in dynalogin (npm)
- Aug 14, 2025
Malicious code in dyna-travel-ui-select-air-trip (npm)
- Aug 14, 2025
Malicious code in dyna-travel-api (npm)
- Aug 14, 2025
Malicious code in dyismcwjuvrftako (npm)
- Aug 14, 2025
Malicious code in dxpress (npm)
- Aug 14, 2025
Malicious code in dxp-web (npm)
- Aug 14, 2025
Malicious code in dxmbyouhpsgiltka (npm)
- Aug 14, 2025
Malicious code in dxjfnwthkpsvuzog (npm)
- Aug 14, 2025
Malicious code in dxfiles (npm)
- Aug 14, 2025
Malicious code in dxball (npm)
- Aug 14, 2025
Malicious code in dxahgyofjmlesnbr (npm)
- Aug 14, 2025
Malicious code in dwslibs (npm)
- Aug 14, 2025
Malicious code in dwellio (npm)
- Aug 14, 2025
Malicious code in dwarf-zamia-cpzy (npm)
- Aug 14, 2025
Malicious code in dwarf-whiskey-fpcz (npm)
- Aug 14, 2025
Malicious code in dwarf-orange-puti (npm)
- Aug 14, 2025
Malicious code in dwarf-lima-g526 (npm)
- Aug 14, 2025
Malicious code in dwarf-kangaroo-bfyu (npm)
- Aug 14, 2025
Malicious code in dwarf-jupiter-e8xo (npm)
- Aug 14, 2025
Malicious code in dwarf-echo-3jvk (npm)
- Aug 14, 2025
Malicious code in dwarf-eagle-is7f (npm)
- Aug 14, 2025
Malicious code in dwarf-dragonfruit-95wq (npm)
- Aug 14, 2025
Malicious code in dwarf-delta-yrzo (npm)
- Aug 14, 2025
Malicious code in dwarf-carrot-9tr9 (npm)
- Aug 14, 2025
Malicious code in dvrt-flux-react-router (npm)
- Aug 14, 2025
Malicious code in dvee3 (npm)
- Aug 14, 2025
Malicious code in dvdstore (npm)
- Aug 14, 2025
Malicious code in dvdrental (npm)
- Aug 14, 2025
Malicious code in duygusal (npm)
- Aug 14, 2025
Malicious code in duverger (npm)
- Aug 14, 2025
Malicious code in dusthelpers-supplement (npm)
- Aug 14, 2025
Malicious code in dusthelpers-onboarding (npm)
- Aug 14, 2025
Malicious code in dusk_rynw0_ewjbk_jewel (npm)
- Aug 14, 2025
Malicious code in dusk_75hjv_dbhkq_pine (npm)
- Aug 14, 2025
Malicious code in dusk_75hdw_bfic8_zenith (npm)
- Aug 14, 2025
Malicious code in dusk_6qvsq_mq3yi_kale (npm)
- Aug 14, 2025
Malicious code in dusk_2osvn_jw7zd_honey (npm)
- Aug 14, 2025
Malicious code in dusk-ogkuk-nvgzy-zenith-project (npm)
- Aug 14, 2025
Malicious code in dusk-lvvgg-m58r7-obsidian-project (npm)
- Aug 14, 2025
Malicious code in durex-app (npm)
- Aug 14, 2025
Malicious code in dupocracy (npm)
- Aug 14, 2025
Malicious code in duplex-electron-proxima-entanglement (npm)
- Aug 14, 2025
Malicious code in duokusdk (npm)
- Aug 14, 2025
Malicious code in duo-jsx (npm)
Page 5627 of 6,650