Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,559 total · sorted newest first- Oct 19, 2026
Malware in ava-ilable-down-load-mp3-today-75491-life-after-youth-hfdu7-yzwkck
1 compromised version
- GHSA-qvvf-2f94-wjcvMalwarenpmavailab-le-alb-um-zip-101158-the-louder-i-call-the-faster-it-runs-64ggm-khmrzgOct 19, 2026
Malware in availab-le-alb-um-zip-101158-the-louder-i-call-the-faster-it-runs-64ggm-khmrzg
1 compromised version
- Oct 19, 2026
Malware in do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl
1 compromised version
- Oct 19, 2026
Malware in availab-le-alb-um-zip-56502-interstellar-space-1qv3j-xsmien
1 compromised version
- GHSA-prmr-rh6m-8g25Malwarenpmmp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsioOct 19, 2026
Malware in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio
1 compromised version
- Oct 19, 2026
Malware in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj
1 compromised version
- Oct 19, 2026
Malware in do-wnload-available-provincial-q7d0i-muzxoj
1 compromised version
- Oct 19, 2026
Malware in ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae
1 compromised version
- Oct 19, 2026
Malware in avail-able-albu-m-down-load-almanac-tdedm-bajrnj
1 compromised version
- Oct 19, 2026
Malware in alb-um-availa-ble-zip-mp3-file-31673-finally-1m7lu-usrooy
1 compromised version
- Oct 19, 2026
Malware in mp3-file-zip-d-ownload-10759-grand-prix-ojzwj-auchhw
1 compromised version
- Oct 19, 2026
Malware in a-lbum-do-wnload-avai-lable-file-playing-the-angel-l9tng-nkbcwn
1 compromised version
- GHSA-gh7w-f38w-p962Malwarenpma-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xoridsOct 19, 2026
Malware in a-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xorids
1 compromised version
- Oct 19, 2026
Malware in a-vailable-al-bum-file-101379-communion-mt1lk-dvshll
1 compromised version
- Oct 19, 2026
Malware in new-al-bum-av-ailable-50924-satta-massagana-rje2z-lfxsfe
1 compromised version
- Oct 19, 2026
Malware in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy
1 compromised version
- Oct 19, 2026
Malware in a-vailable-al-bum-file-36850-other-peoples-lives-vys1z-fuucqk
1 compromised version
- GHSA-9r93-qrfh-qjf4Malwarenpmava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyhOct 19, 2026
Malware in ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh
1 compromised version
- Oct 19, 2026
Malware in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt
1 compromised version
- Oct 19, 2026
Malware in a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp
1 compromised version
- Oct 19, 2026
Malware in availab-le-alb-um-zip-2022-482703-broken-hearts-club-bhvqx-hxwudi
1 compromised version
- Oct 19, 2026
Malware in alb-um-availa-ble-zip-mp3-file-43857-green-light-mrpup-qmtshy
1 compromised version
- Oct 19, 2026
Malware in mp3-file-zip-d-ownload-challengers-ym2l6-mkqhum
1 compromised version
- Oct 19, 2026
Malware in alb-um-availa-ble-zip-mp3-file-470287-watch-my-moves-2zscf-aatbzj
1 compromised version
- Oct 19, 2026
Malware in availab-le-alb-um-zip-38895-crimes-of-passion-oeiro-wmybis
1 compromised version
- Oct 19, 2026
Malware in down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd
1 compromised version
- Oct 19, 2026
Malware in down-load-available-zip-now-265533-the-safeway-elhem-xoyofv
1 compromised version
- Oct 19, 2026
Malware in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon
1 compromised version
- Oct 19, 2026
Malware in do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp
1 compromised version
- Oct 19, 2026
Malware in ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd
1 compromised version
- Oct 19, 2026
Malware in down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg
1 compromised version
- Oct 19, 2026
Malware in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl
1 compromised version
- Oct 19, 2026
Malware in down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg
1 compromised version
- Oct 19, 2026
Malware in mp3-file-zip-d-ownload-hypnotize-kpkk0-ygzaqq
1 compromised version
- Oct 19, 2026
Malicious code in zip-mp3-a-lbum-do-wnload-new-67476-what-we-do-egj2h-bgfgzz (npm)
- Oct 19, 2026
Malicious code in zip-mp3-a-lbum-do-wnload-new-392999-fantasy-island-wlvf4-bxyvtm (npm)
- Oct 19, 2026
Malicious code in new-al-bum-av-ailable-girls-can-tell-ccfoc-vmqodd (npm)
- Oct 19, 2026
Malicious code in new-al-bum-av-ailable-131000-eton-alive-qzngy-cjxczf (npm)
- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz (npm)
- Oct 19, 2026
Malicious code in mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-6140-the-ideal-crash-jysrl-jcdvdw (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-12737-talking-book-grhl4-lwvpqw (npm)
- Oct 19, 2026
Malicious code in down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-the-white-stripes-1-yywrn-pvfqxa (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-f2oap-wvzhe9 (npm)
- Oct 19, 2026
Malicious code in do-wnload-available-2013-5195-ripley-pine-zoryg-cyvlnz (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-the-visitor-l1n8t-frzacy (npm)
- Oct 19, 2026
Malicious code in availab-le-alb-um-zip-211740-city-burials-xwcy6-bhxnvc (npm)
- Oct 19, 2026
Malicious code in avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye (npm)
- Oct 19, 2026
Malicious code in ava-ilable-down-load-mp3-today-35981-saints-and-sinners-mv3po-fqndxw (npm)
Page 34 of 7,312