Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,499 total in npm · sorted newest first- Aug 14, 2025
Malicious code in drafteo (npm)
- Aug 14, 2025
Malicious code in draft-js-sticker-plugin-vixlet (npm)
- Aug 14, 2025
Malicious code in draft-js-mention-plugin-vixlet (npm)
- Aug 14, 2025
Malicious code in draco-private-loop-vega (npm)
- Aug 14, 2025
Malicious code in draco-parallax-mineralogy-quantum (npm)
- Aug 14, 2025
Malicious code in draco-optimize-css-assets-webpack-plugin-proxima-nconf (npm)
- Aug 14, 2025
Malicious code in draco-nconf-callisto-cygnus (npm)
- Aug 14, 2025
Malicious code in draco-lacerta-process-semantic-ui (npm)
- Aug 14, 2025
Malicious code in draco-altair-sirius-jest (npm)
- Aug 14, 2025
Malicious code in dr-service-ecosystem (npm)
- Aug 14, 2025
Malicious code in dr-logger-client (npm)
- Aug 14, 2025
Malicious code in dpscope (npm)
- Aug 14, 2025
Malicious code in dpdraft (npm)
- Aug 14, 2025
Malicious code in dpanneur (npm)
- Aug 14, 2025
Malicious code in doxmaster (npm)
- Aug 14, 2025
Malicious code in down-tanker (npm)
- Aug 14, 2025
Malicious code in down-load-now-9a82i-vc3fui (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-youre-living-all-over-me-pztzf-cdpxrz (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-working-on-a-dream-i6op6-jjzcyy (npm)
- MAL-2025-18715Malwarenpmdown-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfrAug 14, 2025
Malicious code in down-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfr (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-researching-the-blues-n3biv-klnohu (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-in-evening-air-h64zx-skufkw (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-9963-decemberunderground-v5ico-vdkxyl (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-8393-wait-for-me-jdvqg-evxzsz (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-47073-anita-qnknl-xgxkin (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-246213-articulation-ezaoj-nnjghf (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-242367-fad-bpemi-awgouw (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-18341-x-xcib7-hnjfai (npm)
- Aug 14, 2025
Malicious code in down-load-available-zip-now-113116-at-weddings-wpwot-cqpsxb (npm)
- Aug 14, 2025
Malicious code in down-load-available-songs-in-the-key-of-life-1-0w495-lciybu (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-i-am-the-fun-blame-monster-31e3h-wgxkex (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-90774-post-self-c09pn-xqmqrm (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-7728-at-action-park-hda4o-dpbnxo (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-7211-chaos-and-creation-in-the-backyard-ovx5z-nuduuf (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-52887-pawn-hearts-4duor-thjpkj (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-37967-duality-g5efy-wezkck (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-306862-as-days-get-dark-gvxck-huukyv (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-29419-fresh-fw9li-qdnrma (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-261895-fake-it-flowers-fr14h-gmqthe (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-122443-vibrations-1-nvkcw-inalaf (npm)
- Aug 14, 2025
Malicious code in down-lo-ad-now-zip-mp3-114887-here-from-where-we-are-16l6t-tyjpcw (npm)
- Aug 14, 2025
Malicious code in dove-yawn-krp762-project (npm)
- Aug 14, 2025
Malicious code in dove-whirlpool-vlb086-project (npm)
- Aug 14, 2025
Malicious code in dove-savanna-unm849-project (npm)
- Aug 14, 2025
Malicious code in dove-quail-ltm153-project (npm)
- Aug 14, 2025
Malicious code in dove-lagoon-may685-project (npm)
- Aug 14, 2025
Malicious code in dove-iguana-tgy033-project (npm)
- Aug 14, 2025
Malicious code in dove-horizon-vaz208-project (npm)
Page 5633 of 6,650