Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Jun 25, 2024
Malicious code in down_load_ebook_archangel_s_sun_by_nalini_singh_pqsx3 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_appetite_by_ed_balls_el983 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_anoche_sone_mariposas_by_estrella_correa_i7pxe (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_angriffsziel_circle_by_will_jordan_c4qbc (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_anarchy_by_errico_malatesta_1k69f (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_alpha_by_nora_ash_cwtto (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_al_suelo_enredos_con_la_ley_4_by_ruth_m_lerga_smplq (npm)
1 compromised version
- MAL-2024-2126Malwarenpmdown_load_ebook_adventures_in_time_the_six_wives_of_henry_viii_by_dominic_sandbrook_8g73wJun 25, 2024
Malicious code in down_load_ebook_adventures_in_time_the_six_wives_of_henry_viii_by_dominic_sandbrook_8g73w (npm)
1 compromised version
- MAL-2024-2125Malwarenpmdown_load_ebook_ab_sofort_schwester_vol_15_by_nekotofu_taito_y_sonja_r_manga_jam_session_f_207qlJun 25, 2024
Malicious code in down_load_ebook_ab_sofort_schwester_vol_15_by_nekotofu_taito_y_sonja_r_manga_jam_session_f_207ql (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_a_unica_coisa_by_gary_keller_jay_papasan_76ozf (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_a_rainha_do_nada_vol_3_o_povo_do_ar_by_holly_black_4umdo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_a_marquis_in_want_of_a_wife_by_louise_allen_o9jkh (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_a_love_song_for_always_by_piper_lawson_y3ep2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_a_gambling_man_by_david_baldacci_59vmv (npm)
1 compromised version
- MAL-2024-2119Malwarenpmdown_load_ebook_7_maneras_de_lograr_una_mentalidad_positiva_by_libroteka_ktqzxJun 25, 2024
Malicious code in down_load_ebook_7_maneras_de_lograr_una_mentalidad_positiva_by_libroteka_ktqzx (npm)
1 compromised version
- MAL-2024-2118Malwarenpmdown_load_ebook_3_nouvelles_engagees_by_eugene_ionesco_dino_buzzati_boris_vian_792owJun 25, 2024
Malicious code in down_load_ebook_3_nouvelles_engagees_by_eugene_ionesco_dino_buzzati_boris_vian_792ow (npm)
1 compromised version
- MAL-2024-2117Malwarenpmdown_load_ebook_30_minuten_okr_objectives_key_results_by_erno_marius_obogeanu_hempel_andre_daiyu_steiner_qz80mJun 25, 2024
Malicious code in down_load_ebook_30_minuten_okr_objectives_key_results_by_erno_marius_obogeanu_hempel_andre_daiyu_steiner_qz80m (npm)
1 compromised version
- MAL-2024-2116Malwarenpmdown_load_ebook_100_meisterwerke_der_weltliterature_klassiker_di_by_franz_kafka_fjodor_michailowitsch_dostojewski_ru_dwbpwJun 25, 2024
Malicious code in down_load_ebook_100_meisterwerke_der_weltliterature_klassiker_di_by_franz_kafka_fjodor_michailowitsch_dostojewski_ru_dwbpw (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_ebook_100_coisas_que_milionarios_fazem_by_nigel_cumberland_e31fd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in doneida2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in domains-uglify (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in dogbong (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in docusaurus-2-facebook-template (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dochub (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dlw.scbase.staticsite (npm)
1 compromised version
- Jun 25, 2024
Malicious code in djs-fetchers-v14 (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in djs-fetchers (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in djinnsec (npm)
1 compromised version
- Jun 25, 2024
Malicious code in discordjs-invites (npm)
1 compromised version
- Jun 25, 2024
Malicious code in discordjs-fetcher-v13 (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in discord.js-seflbot-v13 (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in discord.js-sbdmall (npm)
1 compromised version
- Jun 25, 2024
Malicious code in discord.js-invites (npm)
1 compromised version
- Jun 25, 2024
Malicious code in discord.js-fetch (npm)
1 compromised version
- Jun 25, 2024
Malicious code in discord.js-dmallfriends-v11 (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in discord.js-builders (npm)
1 compromised version
- Jun 25, 2024
Malicious code in discord-v14-selfbot (npm)
10 compromised versions
- Jun 25, 2024
Malicious code in discord-selfbot.js-v13 (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in discord-bott (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dialog-holder (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in devoxx-test (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in devoxx-demo-confusion (npm)
1 compromised version
- Jun 25, 2024
Malicious code in deviceatlas-clientside (npm)
1 compromised version
- Jun 25, 2024
Malicious code in devedge (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dessid (npm)
1 compromised version
- Jun 25, 2024
Malicious code in descuyid (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependencyconfusion5 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependencyconfusion2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependency-poc-for-testing-only-aswfsfghsssbx (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependency-poc-for-testing-only (npm)
1 compromised version
Page 6196 of 6,646