Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,683 total · sorted newest first- Oct 19, 2026
Malware in j5opb7
1 compromised version
- Oct 19, 2026
Malware in oo9fja
1 compromised version
- Oct 19, 2026
Malware in waojpf
1 compromised version
- Oct 19, 2026
Malware in ljem3j
1 compromised version
- Oct 19, 2026
Malware in giu094
1 compromised version
- Oct 19, 2026
Malware in aqj3w7
1 compromised version
- Oct 19, 2026
Malware in 8i7pp4
1 compromised version
- Oct 19, 2026
Malware in x294tn
1 compromised version
- Oct 19, 2026
Malware in rhlozh
1 compromised version
- Oct 19, 2026
Malware in 3gr2dj
1 compromised version
- Oct 19, 2026
Malware in f4iomt
1 compromised version
- Oct 19, 2026
Malware in g8ez1y
1 compromised version
- Oct 19, 2026
Malware in ysqp68
1 compromised version
- Oct 19, 2026
Malware in g23p4g
1 compromised version
- Oct 19, 2026
Malware in lstsyw
1 compromised version
- Oct 19, 2026
Malware in zubn7b
1 compromised version
- Oct 19, 2026
Malware in ju0oud
1 compromised version
- Oct 19, 2026
Malware in 8h66ok
1 compromised version
- Oct 19, 2026
Malware in noe77e
1 compromised version
- Oct 19, 2026
Malware in j019qc
1 compromised version
- Oct 19, 2026
Malware in 4p9kgm
1 compromised version
- Oct 19, 2026
Malware in 3gr841
1 compromised version
- Oct 19, 2026
Malware in v49yzy
1 compromised version
- Oct 19, 2026
Malware in tkacg3
1 compromised version
- Oct 19, 2026
Malware in esgbz5
1 compromised version
- Oct 19, 2026
Malicious code in new-al-bum-av-ailable-50924-satta-massagana-rje2z-lfxsfe (npm)
- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-hypnotize-kpkk0-ygzaqq (npm)
- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-challengers-ym2l6-mkqhum (npm)
- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-10759-grand-prix-ojzwj-auchhw (npm)
- Oct 19, 2026
Malicious code in mp3-do-wnload-file-to-day-d-nu951-cjkdsy (npm)
- Oct 19, 2026
Malicious code in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio (npm)
- Oct 19, 2026
Malicious code in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt (npm)
- Oct 19, 2026
Malicious code in down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh (npm)
- Oct 19, 2026
Malicious code in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl (npm)
- Oct 19, 2026
Malicious code in down-load-available-zip-now-265533-the-safeway-elhem-xoyofv (npm)
- Oct 19, 2026
Malicious code in down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd (npm)
- MAL-2026-18001Malwarenpmdown-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdioOct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-provincial-q7d0i-muzxoj (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-2016-44937-in-the-magic-hour-xgzaj-txvlft (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-hope-for-men-wmh1o-fjstib (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-56502-interstellar-space-1qv3j-xsmien (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-38895-crimes-of-passion-oeiro-wmybis (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-2022-482703-broken-hearts-club-bhvqx-hxwudi (npm)
- MAL-2026-17980Malwarenpmavailab-le-alb-um-zip-101158-the-louder-i-call-the-faster-it-runs-64ggm-khmrzgOct 19, 2026
Malicious code in availab-le-alb-um-zip-101158-the-louder-i-call-the-faster-it-runs-64ggm-khmrzg (npm)
Page 15 of 7,294