Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,674 total · sorted newest first- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz (npm)
- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-6140-the-ideal-crash-jysrl-jcdvdw (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-12737-talking-book-grhl4-lwvpqw (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-the-white-stripes-1-yywrn-pvfqxa (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-f2oap-wvzhe9 (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-2013-5195-ripley-pine-zoryg-cyvlnz (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-the-visitor-l1n8t-frzacy (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-211740-city-burials-xwcy6-bhxnvc (npm)
- Oct 19, 2026
Malicious code in avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye (npm)
- Oct 19, 2026
Malicious code in ava-ilable-down-load-mp3-today-35981-saints-and-sinners-mv3po-fqndxw (npm)
- Oct 19, 2026
Malicious code in alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh (npm)
- Oct 19, 2026
Malicious code in alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko (npm)
- Oct 19, 2026
Malicious code in a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia (npm)
- Oct 19, 2026
Malicious code in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt (npm)
- Oct 19, 2026
Malicious code in a-vailable-al-bum-file-2015-39171-harmlessness-khwlm-ihtwah (npm)
- Oct 19, 2026
Malicious code in a-vailable-al-bum-file-19105-filles-de-kilimanjaro-4syt9-khnipp (npm)
- Oct 19, 2026
Malicious code in a-vailable-al-bum-513977-rant-in-e-minor-lybr0-bdhlsb (npm)
- Oct 19, 2026
Malicious code in a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip (npm)
- Oct 19, 2026
Malicious code in a-lbum-do-wnload-avai-lable-file-2019-138062-i-need-a-new-war-pp6yu-vclmgu (npm)
- Oct 19, 2026
Malware in new-al-bum-av-ailable-girls-can-tell-ccfoc-vmqodd
1 compromised version
- Oct 19, 2026
Malware in do-wnload-available-f2oap-wvzhe9
1 compromised version
- Oct 19, 2026
Malware in avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye
1 compromised version
- Oct 19, 2026
Malware in a-vailable-al-bum-file-2015-39171-harmlessness-khwlm-ihtwah
1 compromised version
- Oct 19, 2026
Malware in zip-mp3-a-lbum-do-wnload-new-392999-fantasy-island-wlvf4-bxyvtm
1 compromised version
- Oct 19, 2026
Malware in a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip
1 compromised version
- Oct 19, 2026
Malware in availab-le-alb-um-zip-211740-city-burials-xwcy6-bhxnvc
1 compromised version
- Oct 19, 2026
Malware in do-wnload-available-2013-5195-ripley-pine-zoryg-cyvlnz
1 compromised version
- Oct 19, 2026
Malware in down-lo-ad-now-zip-mp3-6140-the-ideal-crash-jysrl-jcdvdw
1 compromised version
- GHSA-fr5c-v53m-q6f8Malwarenpma-lbum-do-wnload-avai-lable-file-2019-138062-i-need-a-new-war-pp6yu-vclmguOct 19, 2026
Malware in a-lbum-do-wnload-avai-lable-file-2019-138062-i-need-a-new-war-pp6yu-vclmgu
1 compromised version
- Oct 19, 2026
Malware in alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko
1 compromised version
- Oct 19, 2026
Malware in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt
1 compromised version
- Oct 19, 2026
Malware in a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia
1 compromised version
- Oct 19, 2026
Malware in mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz
1 compromised version
- Oct 19, 2026
Malware in a-vailable-al-bum-file-19105-filles-de-kilimanjaro-4syt9-khnipp
1 compromised version
- Oct 19, 2026
Malware in down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv
1 compromised version
- Oct 19, 2026
Malware in down-lo-ad-now-zip-mp3-12737-talking-book-grhl4-lwvpqw
1 compromised version
- Oct 19, 2026
Malware in new-al-bum-av-ailable-131000-eton-alive-qzngy-cjxczf
1 compromised version
- Oct 19, 2026
Malware in do-wnload-available-the-white-stripes-1-yywrn-pvfqxa
1 compromised version
- Oct 19, 2026
Malware in availab-le-alb-um-zip-the-visitor-l1n8t-frzacy
1 compromised version
- Oct 19, 2026
Malware in mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz
1 compromised version
- Oct 19, 2026
Malware in zip-mp3-a-lbum-do-wnload-new-67476-what-we-do-egj2h-bgfgzz
1 compromised version
- Oct 19, 2026
Malware in alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh
1 compromised version
- Oct 19, 2026
Malware in a-vailable-al-bum-513977-rant-in-e-minor-lybr0-bdhlsb
1 compromised version
- Oct 19, 2026
Malware in ava-ilable-down-load-mp3-today-35981-saints-and-sinners-mv3po-fqndxw
1 compromised version
- Oct 19, 2026
Malicious code in bs58x64.js (npm)
- Oct 19, 2026
Malicious code in bs58x64 (npm)
- Oct 19, 2026
Malware in bs58x64.js
1 compromised version
- Oct 19, 2026
Malware in bs58x64
1 compromised version
Page 17 of 7,294