Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in albatross-nectar-lhr501-project (npm)
- Aug 14, 2025
Malicious code in albatross-iris-taa438-project (npm)
- Aug 14, 2025
Malicious code in albatross-infinity-erv465-project (npm)
- Aug 14, 2025
Malicious code in albatross-igloo-qfw656-project (npm)
- Aug 14, 2025
Malicious code in albatross-boulder-ekx837-project (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-87774-sweet-and-dandy-u8y37-xsfuaz (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-6701-black-monk-time-a72gt-xmggfd (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-470382-acts-of-god-a6hb1-jgniqs (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-257508-the-ascension-94teg-bymdfl (npm)
- MAL-2025-14247Malwarenpmalb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwuAug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwu (npm)
- MAL-2025-14246Malwarenpmalb-um-availa-ble-zip-mp3-file-2014-19329-nobody-wants-to-be-here-and-nobody-wants-to-leave-9l846-lhyxqhAug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-2014-19329-nobody-wants-to-be-here-and-nobody-wants-to-leave-9l846-lhyxqh (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-2013-9765-night-time-my-time-8wmqr-nytqyh (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-197627-the-performer-rijx3-aoduph (npm)
- Aug 14, 2025
Malicious code in alb-um-availa-ble-zip-mp3-file-131408-zeppelin-over-china-ylmq2-mamqni (npm)
- Aug 14, 2025
Malicious code in alarme (npm)
- Aug 14, 2025
Malicious code in alanasme (npm)
- Aug 14, 2025
Malicious code in alanarato (npm)
- Aug 14, 2025
Malicious code in alakkai (npm)
- Aug 14, 2025
Malicious code in akuimwubna (npm)
- Aug 14, 2025
Malicious code in aktivity-api (npm)
- Aug 14, 2025
Malicious code in aksznwqglkihrtpc (npm)
- Aug 14, 2025
Malicious code in aksite (npm)
- Aug 14, 2025
Malicious code in akpxflytjsmiuckg (npm)
- Aug 14, 2025
Malicious code in akmtoyczrwvbislj (npm)
- Aug 14, 2025
Malicious code in akmailer (npm)
- Aug 14, 2025
Malicious code in akkaflix (npm)
- Aug 14, 2025
Malicious code in akinewe (npm)
- Aug 14, 2025
Malicious code in akihito (npm)
- Aug 14, 2025
Malicious code in akfxikqezhmrbouv (npm)
- Aug 14, 2025
Malicious code in akero-stylesheet (npm)
- Aug 14, 2025
Malicious code in akero-forms (npm)
- Aug 14, 2025
Malicious code in akeljtyxpnvckhdr (npm)
- Aug 14, 2025
Malicious code in akbgfuywmeqxsjip (npm)
- Aug 14, 2025
Malicious code in akaudit (npm)
- Aug 14, 2025
Malicious code in akarichan (npm)
- Aug 14, 2025
Malicious code in ajaxnotes (npm)
- Aug 14, 2025
Malicious code in ajakumar (npm)
- Aug 14, 2025
Malicious code in aixdlkqsmfbwyzhn (npm)
- Aug 14, 2025
Malicious code in aiwbgukjcplesthm (npm)
- Aug 14, 2025
Malicious code in aitnkcwpuysdfmjz (npm)
- Aug 14, 2025
Malicious code in aisohio (npm)
- Aug 14, 2025
Malicious code in aiskao (npm)
- Aug 14, 2025
Malicious code in airxmail (npm)
- Aug 14, 2025
Malicious code in airwave (npm)
- Aug 14, 2025
Malicious code in airwallex-online-payments-gateway (npm)
- Aug 14, 2025
Malicious code in airship.com (npm)
Page 6136 of 7,293