Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,499 total in npm · sorted newest first- Aug 14, 2025
Malicious code in dreampy (npm)
- Aug 14, 2025
Malicious code in dreamerq (npm)
- Aug 14, 2025
Malicious code in dreamedit (npm)
- Aug 14, 2025
Malicious code in dream_xzdal_p03yl_yonder (npm)
- Aug 14, 2025
Malicious code in dream_t8rsq_6zttd_kryptonite (npm)
- Aug 14, 2025
Malicious code in dream_pu36t_xpc65_crystal (npm)
- Aug 14, 2025
Malicious code in dream_lv7pd_x736k_jungle (npm)
- Aug 14, 2025
Malicious code in dream_lnxur_chfj1_xenon (npm)
- Aug 14, 2025
Malicious code in dream_cd1eo_7m6cb_honey (npm)
- Aug 14, 2025
Malicious code in dream_bivfx_1zy7z_maple (npm)
- Aug 14, 2025
Malicious code in drbeat (npm)
- Aug 14, 2025
Malicious code in drawon (npm)
- Aug 14, 2025
Malicious code in drawoid (npm)
- Aug 14, 2025
Malicious code in drawingps (npm)
- Aug 14, 2025
Malicious code in draugur (npm)
- Aug 14, 2025
Malicious code in drangula (npm)
- Aug 14, 2025
Malicious code in dragula.js (npm)
- Aug 14, 2025
Malicious code in dragstrip (npm)
- Aug 14, 2025
Malicious code in dragro (npm)
- Aug 14, 2025
Malicious code in dragonfruit-uniform-2lp9 (npm)
- Aug 14, 2025
Malicious code in dragonfruit-temple-xmjg (npm)
- Aug 14, 2025
Malicious code in dragonfruit-nutmeg-ux48 (npm)
- Aug 14, 2025
Malicious code in dragonfruit-nightingale-lu3u (npm)
- Aug 14, 2025
Malicious code in dragonfruit-kapok-vgnu (npm)
- Aug 14, 2025
Malicious code in dragonfruit-kangaroo-luuf (npm)
- Aug 14, 2025
Malicious code in dragonfruit-india-rs59 (npm)
- Aug 14, 2025
Malicious code in dragonfruit-bark-ysow (npm)
- Aug 14, 2025
Malicious code in dragonbar (npm)
- Aug 14, 2025
Malicious code in dragon-zenith-fpi840-project (npm)
- Aug 14, 2025
Malicious code in dragon-yawn-ngv292-project (npm)
- Aug 14, 2025
Malicious code in dragon-yawn-cfm890-project (npm)
- Aug 14, 2025
Malicious code in dragon-xylophone-bvv149-project (npm)
- Aug 14, 2025
Malicious code in dragon-willow-wls785-project (npm)
- Aug 14, 2025
Malicious code in dragon-whirlpool-sze629-project (npm)
- Aug 14, 2025
Malicious code in dragon-tulip-ulh458-project (npm)
- Aug 14, 2025
Malicious code in dragon-penguin-akk736-project (npm)
- Aug 14, 2025
Malicious code in dragon-peacock-glm385-project (npm)
- Aug 14, 2025
Malicious code in dragon-kale-rax096-project (npm)
- Aug 14, 2025
Malicious code in dragon-infinity-fnk008-project (npm)
- Aug 14, 2025
Malicious code in dragon-hill-dkg047-project (npm)
- Aug 14, 2025
Malicious code in dragon-grove-xpg303-project (npm)
- Aug 14, 2025
Malicious code in dragon-grove-qxk798-project (npm)
- Aug 14, 2025
Malicious code in dragon-forest-qha399-project (npm)
- Aug 14, 2025
Malicious code in dragon-dandelion-jqd178-project (npm)
- Aug 14, 2025
Malicious code in dragon-blossom-pvr257-project (npm)
- Aug 14, 2025
Malicious code in dragon-amber-tpi790-project (npm)
- Aug 14, 2025
Malicious code in dragduino (npm)
- Aug 14, 2025
Malicious code in dragand-subtitle-plugin (npm)
- Aug 14, 2025
Malicious code in dragand-player-plugin (npm)
- Aug 14, 2025
Malicious code in dragand-fileinfo-plugin (npm)
Page 5632 of 6,650