Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in alchemy-5p9dp-k62ml-zenith-project (npm)
- Aug 14, 2025
Malicious code in alchemy-5iqmn-ac151-nymph-project (npm)
- Aug 14, 2025
Malicious code in alchemy-3k0rp-mvdxg-flora-project (npm)
- Aug 14, 2025
Malicious code in alcarin-lib (npm)
- Aug 14, 2025
Malicious code in albatross-zenith-xbc036-project (npm)
- Aug 14, 2025
Malicious code in albatross-zenith-ecd814-project (npm)
- Aug 14, 2025
Malicious code in albatross-yonder-ijj186-project (npm)
- Aug 14, 2025
Malicious code in albatross-yonder-fbt620-project (npm)
- Aug 14, 2025
Malicious code in albatross-volcano-knk019-project (npm)
- Aug 14, 2025
Malicious code in albatross-volcano-ciq357-project (npm)
- Aug 14, 2025
Malicious code in albatross-tiger-fst792-project (npm)
- Aug 14, 2025
Malicious code in albatross-sunset-jfj328-project (npm)
- Aug 14, 2025
Malicious code in albatross-savanna-eks601-project (npm)
- Aug 14, 2025
Malicious code in albatross-nectar-lhr501-project (npm)
- Aug 14, 2025
Malicious code in albatross-iris-taa438-project (npm)
- Aug 14, 2025
Malicious code in albatross-infinity-erv465-project (npm)
- Aug 14, 2025
Malicious code in albatross-igloo-qfw656-project (npm)
- Aug 14, 2025
Malicious code in albatross-boulder-ekx837-project (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-87774-sweet-and-dandy-u8y37-xsfuaz (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-6701-black-monk-time-a72gt-xmggfd (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-470382-acts-of-god-a6hb1-jgniqs (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-257508-the-ascension-94teg-bymdfl (npm)
- MAL-2025-14247Malwarenpmalb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwuAug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwu (npm)
- MAL-2025-14246Malwarenpmalb-um-availa-ble-zip-mp3-file-2014-19329-nobody-wants-to-be-here-and-nobody-wants-to-leave-9l846-lhyxqhAug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-2014-19329-nobody-wants-to-be-here-and-nobody-wants-to-leave-9l846-lhyxqh (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-2013-9765-night-time-my-time-8wmqr-nytqyh (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-197627-the-performer-rijx3-aoduph (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-131408-zeppelin-over-china-ylmq2-mamqni (npm)
- Aug 14, 2025
Malicious code in alarme (npm)
- Aug 14, 2025
Malicious code in alanasme (npm)
- Aug 14, 2025
Malicious code in alanarato (npm)
- Aug 14, 2025
Malicious code in alakkai (npm)
- Aug 14, 2025
Malicious code in akuimwubna (npm)
- Aug 14, 2025
Malicious code in aktivity-api (npm)
- Aug 14, 2025
Malicious code in aksznwqglkihrtpc (npm)
- Aug 14, 2025
Malicious code in aksite (npm)
- Aug 14, 2025
Malicious code in akpxflytjsmiuckg (npm)
- Aug 14, 2025
Malicious code in akmtoyczrwvbislj (npm)
- Aug 14, 2025
Malicious code in akmailer (npm)
- Aug 14, 2025
Malicious code in akkaflix (npm)
- Aug 14, 2025
Malicious code in akinewe (npm)
- Aug 14, 2025
Malicious code in akihito (npm)
- Aug 14, 2025
Malicious code in akfxikqezhmrbouv (npm)
- Aug 14, 2025
Malicious code in akero-stylesheet (npm)
- Aug 14, 2025
Malicious code in akero-forms (npm)
- Aug 14, 2025
Malicious code in akeljtyxpnvckhdr (npm)
- Aug 14, 2025
Malicious code in akbgfuywmeqxsjip (npm)
Page 5706 of 6,634