Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in avalon-cli-server (npm)
- Aug 14, 2025
Malicious code in avalon-cli-run-ios (npm)
- Aug 14, 2025
Malicious code in avalon-cli-prepare-ios (npm)
- Aug 14, 2025
Malicious code in avalon-cli-download (npm)
- Aug 14, 2025
Malicious code in avalon-cli-create (npm)
- Aug 14, 2025
Malicious code in avalon-cli-console (npm)
- Aug 14, 2025
Malicious code in avalon-cli-build-ios (npm)
- Aug 14, 2025
Malicious code in avalon-cli (npm)
- Aug 14, 2025
Malicious code in available-slug (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-source-tags-codes-cd4tp-nojdxy (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-revolution-j9gvf-mnvayq (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-aw-cmon-7vtid-fqzrrj (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-a-ghost-is-born-fgmfl-kscsps (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-47309-then-play-on-g62ow-pkbmnx (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-349816-when-smoke-rises-ovwzf-uadxbi (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-26952-slain-by-yatsura-3pr31-aqtxea (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-2016-50027-silent-earthling-u2tuv-kewuqp (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-19300-magic-time-1ei3b-iuzxjr (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-17375-who-else-esihf-alrnbv (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-10787-electro-shock-blues-5ex8q-tklmne (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-5541-death-is-this-communion-n9ln6-ucncmt (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-54898-only-life-s3kh1-topcgy (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-496664-young-blood-32ul1-snsovu (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-441605-doom-crew-inc-ckkyk-vizpqd (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-43854-home-plate-cfjtj-akqpps (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-41111-camoufleur-t3gly-fjscto (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-38244-here-comes-science-ezvvi-tqkldb (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-375364-royal-son-of-ethiopia-g5ifn-jfifud (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-37259-chocolate-city-a5vgf-tutjjr (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-36853-maat-mama-0d2lq-jfevrb (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-34189-paradise-and-lunch-58fyg-kxskdv (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-2018-126723-interstate-gospel-utqlp-kcqybg (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-2014-21052-the-inevitable-end-box51-pznqrt (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-2013-5888-false-idols-dclra-zgmhec (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-140809-hard-attack-l6xc2-okkcxx (npm)
- Aug 14, 2025
Malicious code in avail-able-albu-m-down-load-118093-electric-messiah-ne6od-mtsuyr (npm)
- Aug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-draft-730-s4686-umrmvz (npm)
- Aug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-7267-streets-disciple-kf68a-phihdh (npm)
- Aug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-5613-whos-next-01blq-nbctcz (npm)
- Aug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-34783-leave-to-remain-ns5pr-lhhazn (npm)
- Aug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-33142-precious-falling-tmwor-vsvzvj (npm)
- Aug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-31194-screamin-for-my-supper-gg9s6-ioyirj (npm)
- MAL-2025-15131Malwarenpmava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovuAug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu (npm)
- MAL-2025-15130Malwarenpmava-ilable-down-load-mp3-today-2015-33446-joshua-redman-the-bad-plus-7xzw7-debkeoAug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-2015-33446-joshua-redman-the-bad-plus-7xzw7-debkeo (npm)
- Aug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-15541-troubled-shaken-etc-0oakd-xtjnkz (npm)
- Aug 14, 2025
Malicious code in ava-ilable-down-load-mp3-today-10710-pixel-revolt-5ic8c-odqdxc (npm)
- Aug 14, 2025
Malicious code in auviewer (npm)
- Aug 14, 2025
Malicious code in autravail (npm)
- Aug 14, 2025
Malicious code in autozvit (npm)
- Aug 14, 2025
Malicious code in autotron (npm)
Page 5688 of 6,634