Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,559 total · sorted newest first- Oct 19, 2026
Malware in 3gr841
1 compromised version
- Oct 19, 2026
Malware in v49yzy
1 compromised version
- Oct 19, 2026
Malware in tkacg3
1 compromised version
- Oct 19, 2026
Malware in esgbz5
1 compromised version
- Oct 19, 2026
Malicious code in new-al-bum-av-ailable-50924-satta-massagana-rje2z-lfxsfe (npm)
- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-hypnotize-kpkk0-ygzaqq (npm)
- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-challengers-ym2l6-mkqhum (npm)
- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-10759-grand-prix-ojzwj-auchhw (npm)
- Oct 19, 2026
Malicious code in mp3-do-wnload-file-to-day-d-nu951-cjkdsy (npm)
- Oct 19, 2026
Malicious code in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio (npm)
- Oct 19, 2026
Malicious code in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt (npm)
- Oct 19, 2026
Malicious code in down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh (npm)
- Oct 19, 2026
Malicious code in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl (npm)
- Oct 19, 2026
Malicious code in down-load-available-zip-now-265533-the-safeway-elhem-xoyofv (npm)
- Oct 19, 2026
Malicious code in down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd (npm)
- MAL-2026-18001Malwarenpmdown-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdioOct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-provincial-q7d0i-muzxoj (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-2016-44937-in-the-magic-hour-xgzaj-txvlft (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-hope-for-men-wmh1o-fjstib (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-56502-interstellar-space-1qv3j-xsmien (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-38895-crimes-of-passion-oeiro-wmybis (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-2022-482703-broken-hearts-club-bhvqx-hxwudi (npm)
- MAL-2026-17980Malwarenpmavailab-le-alb-um-zip-101158-the-louder-i-call-the-faster-it-runs-64ggm-khmrzgOct 19, 2026
Malicious code in availab-le-alb-um-zip-101158-the-louder-i-call-the-faster-it-runs-64ggm-khmrzg (npm)
- Oct 19, 2026
Malicious code in avail-able-albu-m-down-load-almanac-tdedm-bajrnj (npm)
- Oct 19, 2026
Malicious code in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj (npm)
- Oct 19, 2026
Malicious code in ava-ilable-down-load-mp3-today-75491-life-after-youth-hfdu7-yzwkck (npm)
- Oct 19, 2026
Malicious code in ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae (npm)
- Oct 19, 2026
Malicious code in ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh (npm)
- Oct 19, 2026
Malicious code in ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd (npm)
- Oct 19, 2026
Malicious code in alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz (npm)
- Oct 19, 2026
Malicious code in alb-um-availa-ble-zip-mp3-file-470287-watch-my-moves-2zscf-aatbzj (npm)
- Oct 19, 2026
Malicious code in alb-um-availa-ble-zip-mp3-file-43857-green-light-mrpup-qmtshy (npm)
- Oct 19, 2026
Malicious code in alb-um-availa-ble-zip-mp3-file-31673-finally-1m7lu-usrooy (npm)
- Oct 19, 2026
Malicious code in a-vailable-al-bum-file-36850-other-peoples-lives-vys1z-fuucqk (npm)
- Oct 19, 2026
Malicious code in a-vailable-al-bum-file-101379-communion-mt1lk-dvshll (npm)
- Oct 19, 2026
Malicious code in a-lbum-do-wnload-avai-lable-file-playing-the-angel-l9tng-nkbcwn (npm)
- MAL-2026-17954Malwarenpma-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xoridsOct 19, 2026
Malicious code in a-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xorids (npm)
- Oct 19, 2026
Malicious code in a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp (npm)
- Oct 19, 2026
Malware in mp3-do-wnload-file-to-day-d-nu951-cjkdsy
1 compromised version
- Oct 19, 2026
Malware in do-wnload-available-2016-44937-in-the-magic-hour-xgzaj-txvlft
1 compromised version
- Oct 19, 2026
Malware in availab-le-alb-um-zip-hope-for-men-wmh1o-fjstib
1 compromised version
- Oct 19, 2026
Malware in alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz
1 compromised version
- Oct 19, 2026
Malware in down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh
1 compromised version
- GHSA-r42g-57f7-9v75Malwarenpmdown-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdioOct 19, 2026
Malware in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio
1 compromised version
Page 33 of 7,312