Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-26451-e-a-9vudr-dkjlzi (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-21779-stoosh-ejqig-iuyzvg (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-214683-i-love-the-new-sky-mdctg-bpldzg (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-212807-good-souls-better-angels-ydvzu-zkfgom (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-211195-the-caretaker-qpj4e-vojhua (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-2016-53720-my-best-human-face-ut6vi-wmlvvn (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-185797-likewise-tc2je-eosyti (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-13575-forts-fsk2p-gmeawq (npm)
- Aug 14, 2025
Malicious code in a-simple-cache (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-nevermind-1-6utup-ncqpuh (npm)
- MAL-2025-13912Malwarenpma-lbum-do-wnload-avai-lable-file-8408-voices-of-animals-and-men-oam0j-dsqkipAug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-8408-voices-of-animals-and-men-oam0j-dsqkip (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-467383-bronco-nxky8-uhnoxf (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-363039-de-doorn-lu0q1-tqebeu (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-209382-ricky-music-5n2qv-tclmfr (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws (npm)
- MAL-2025-13906Malwarenpma-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrscaAug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca (npm)
- MAL-2025-13905Malwarenpma-lbum-do-wnload-avai-lable-file-168311-grits-beans-and-greens-the-lost-fontana-studio-sessions-1969-hotvj-ounwwpAug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-168311-grits-beans-and-greens-the-lost-fontana-studio-sessions-1969-hotvj-ounwwp (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-105412-gilberto-gil-yhd80-ckwsmo (npm)
- Aug 14, 2025
Malicious code in @zyro-inc/eslint-config-zyro (npm)
- Aug 14, 2025
Malicious code in @zittertea/voluptatum-atque-similique-quidem (npm)
- Aug 14, 2025
Malicious code in @zittertea/vero-ut-perspiciatis (npm)
- Aug 14, 2025
Malicious code in @zittertea/tenetur-blanditiis-quam-error (npm)
- Aug 14, 2025
Malicious code in @zittertea/similique-harum-minima (npm)
- Aug 14, 2025
Malicious code in @zittertea/sequi-amet-at (npm)
- Aug 14, 2025
Malicious code in @zittertea/sapiente-earum-ducimus (npm)
- Aug 14, 2025
Malicious code in @zittertea/saepe-tempore-possimus-hic (npm)
- Aug 14, 2025
Malicious code in @zittertea/rerum-totam-officia-laudantium (npm)
- Aug 14, 2025
Malicious code in @zittertea/reprehenderit-modi-suscipit (npm)
- Aug 14, 2025
Malicious code in @zittertea/quod-quis-earum (npm)
- Aug 14, 2025
Malicious code in @zittertea/quam-corrupti-neque (npm)
- Aug 14, 2025
Malicious code in @zittertea/quae-doloremque-expedita-quas (npm)
- Aug 14, 2025
Malicious code in @zittertea/praesentium-suscipit-nihil-esse (npm)
- Aug 14, 2025
Malicious code in @zittertea/possimus-eos-architecto (npm)
- Aug 14, 2025
Malicious code in @zittertea/pariatur-quis-doloribus-non (npm)
- Aug 14, 2025
Malicious code in @zittertea/optio-recusandae-aspernatur (npm)
- Aug 14, 2025
Malicious code in @zittertea/optio-magnam-exercitationem (npm)
- Aug 14, 2025
Malicious code in @zittertea/natus-aliquam-eius-consectetur (npm)
- Aug 14, 2025
Malicious code in @zittertea/nam-autem-ea (npm)
- Aug 14, 2025
Malicious code in @zittertea/nam-accusamus-magnam-nisi (npm)
- Aug 14, 2025
Malicious code in @zittertea/molestias-vitae-ex-accusantium (npm)
- Aug 14, 2025
Malicious code in @zittertea/minus-nisi-molestias-ipsa (npm)
- Aug 14, 2025
Malicious code in @zittertea/minima-nisi-placeat-cupiditate (npm)
- Aug 14, 2025
Malicious code in @zittertea/minima-distinctio-occaecati-dolorum (npm)
- Aug 14, 2025
Malicious code in @zittertea/maiores-quis-repellat (npm)
- Aug 14, 2025
Malicious code in @zittertea/libero-error-ex-enim (npm)
- Aug 14, 2025
Malicious code in @zittertea/laboriosam-maxime-deserunt-quo (npm)
- Aug 14, 2025
Malicious code in @zittertea/laboriosam-itaque-iste-aliquid (npm)
Page 5713 of 6,634