Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,500 total in npm · sorted newest first- Aug 14, 2025
Malicious code in dune-zenith-fpa351-project (npm)
- Aug 14, 2025
Malicious code in dune-vortex-usa796-project (npm)
- Aug 14, 2025
Malicious code in dune-unicorn-kyz189-project (npm)
- Aug 14, 2025
Malicious code in dune-u1esb-1ffug-quiver-project (npm)
- Aug 14, 2025
Malicious code in dune-sunset-wuw368-project (npm)
- Aug 14, 2025
Malicious code in dune-quasar-ozm188-project (npm)
- Aug 14, 2025
Malicious code in dune-peony-vnm107-project (npm)
- Aug 14, 2025
Malicious code in dune-opaline-fme342-project (npm)
- Aug 14, 2025
Malicious code in dune-opaline-anh944-project (npm)
- Aug 14, 2025
Malicious code in dune-lagoon-dbp673-project (npm)
- Aug 14, 2025
Malicious code in dune-kite-ybk457-project (npm)
- Aug 14, 2025
Malicious code in dune-jewel-rou942-project (npm)
- Aug 14, 2025
Malicious code in dune-jade-plw648-project (npm)
- Aug 14, 2025
Malicious code in dune-iguana-wtw825-project (npm)
- Aug 14, 2025
Malicious code in dune-icicle-ixm344-project (npm)
- Aug 14, 2025
Malicious code in dune-forest-ewr577-project (npm)
- Aug 14, 2025
Malicious code in dune-everglow-qoe118-project (npm)
- Aug 14, 2025
Malicious code in dune-eprt0-ov9mj-boulder-project (npm)
- Aug 14, 2025
Malicious code in dune-bonfire-nvp542-project (npm)
- Aug 14, 2025
Malicious code in dune-0ilyc-fiapo-moondust-project (npm)
- Aug 14, 2025
Malicious code in duncand (npm)
- Aug 14, 2025
Malicious code in dumbrocks (npm)
- Aug 14, 2025
Malicious code in duinomite (npm)
- Aug 14, 2025
Malicious code in duhovni (npm)
- Aug 14, 2025
Malicious code in duemail (npm)
- Aug 14, 2025
Malicious code in duelstick (npm)
- Aug 14, 2025
Malicious code in duel-core (npm)
- Aug 14, 2025
Malicious code in dudelols (npm)
- Aug 14, 2025
Malicious code in ductus (npm)
- Aug 14, 2025
Malicious code in ducanh1368-gas-convert (npm)
- Aug 14, 2025
Malicious code in duba (npm)
- Aug 14, 2025
Malicious code in duanlian (npm)
- Aug 14, 2025
Malicious code in duabot (npm)
- Aug 14, 2025
Malicious code in dtrundle (npm)
- Aug 14, 2025
Malicious code in dtmcsbhjevgqnxua (npm)
- Aug 14, 2025
Malicious code in dtljayqkgwxrmvku (npm)
- Aug 14, 2025
Malicious code in dtcleaner (npm)
- Aug 14, 2025
Malicious code in dt-oneagent-tailor (npm)
- Aug 14, 2025
Malicious code in dsvqozpircyntxgb (npm)
- Aug 14, 2025
Malicious code in dspython (npm)
- Aug 14, 2025
Malicious code in dspreso (npm)
- Aug 14, 2025
Malicious code in dspmgr (npm)
- Aug 14, 2025
Malicious code in dsounite (npm)
- Aug 14, 2025
Malicious code in dsnippets (npm)
- Aug 14, 2025
Malicious code in dslive (npm)
- Aug 14, 2025
Malicious code in dslash-parser (npm)
- Aug 14, 2025
Malicious code in dshelx (npm)
- Aug 14, 2025
Malicious code in dshellx (npm)
- Aug 14, 2025
Malicious code in dshelld (npm)
- Aug 14, 2025
Malicious code in dshellb (npm)
Page 5628 of 6,650