Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-363039-de-doorn-lu0q1-tqebeu (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-209382-ricky-music-5n2qv-tclmfr (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws (npm)
- MAL-2025-13906Malwarenpma-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrscaAug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca (npm)
- MAL-2025-13905Malwarenpma-lbum-do-wnload-avai-lable-file-168311-grits-beans-and-greens-the-lost-fontana-studio-sessions-1969-hotvj-ounwwpAug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-168311-grits-beans-and-greens-the-lost-fontana-studio-sessions-1969-hotvj-ounwwp (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc (npm)
- Aug 14, 2025
Malicious code in a-lbum-do-wnload-avai-lable-file-105412-gilberto-gil-yhd80-ckwsmo (npm)
- Aug 14, 2025
Malicious code in @zyro-inc/eslint-config-zyro (npm)
- Aug 14, 2025
Malicious code in @zittertea/voluptatum-atque-similique-quidem (npm)
- Aug 14, 2025
Malicious code in @zittertea/vero-ut-perspiciatis (npm)
- Aug 14, 2025
Malicious code in @zittertea/tenetur-blanditiis-quam-error (npm)
- Aug 14, 2025
Malicious code in @zittertea/similique-harum-minima (npm)
- Aug 14, 2025
Malicious code in @zittertea/sequi-amet-at (npm)
- Aug 14, 2025
Malicious code in @zittertea/sapiente-earum-ducimus (npm)
- Aug 14, 2025
Malicious code in @zittertea/saepe-tempore-possimus-hic (npm)
- Aug 14, 2025
Malicious code in @zittertea/rerum-totam-officia-laudantium (npm)
- Aug 14, 2025
Malicious code in @zittertea/reprehenderit-modi-suscipit (npm)
- Aug 14, 2025
Malicious code in @zittertea/quod-quis-earum (npm)
- Aug 14, 2025
Malicious code in @zittertea/quam-corrupti-neque (npm)
- Aug 14, 2025
Malicious code in @zittertea/quae-doloremque-expedita-quas (npm)
- Aug 14, 2025
Malicious code in @zittertea/praesentium-suscipit-nihil-esse (npm)
- Aug 14, 2025
Malicious code in @zittertea/possimus-eos-architecto (npm)
- Aug 14, 2025
Malicious code in @zittertea/pariatur-quis-doloribus-non (npm)
- Aug 14, 2025
Malicious code in @zittertea/optio-recusandae-aspernatur (npm)
- Aug 14, 2025
Malicious code in @zittertea/optio-magnam-exercitationem (npm)
- Aug 14, 2025
Malicious code in @zittertea/natus-aliquam-eius-consectetur (npm)
- Aug 14, 2025
Malicious code in @zittertea/nam-autem-ea (npm)
- Aug 14, 2025
Malicious code in @zittertea/nam-accusamus-magnam-nisi (npm)
- Aug 14, 2025
Malicious code in @zittertea/molestias-vitae-ex-accusantium (npm)
- Aug 14, 2025
Malicious code in @zittertea/minus-nisi-molestias-ipsa (npm)
- Aug 14, 2025
Malicious code in @zittertea/minima-nisi-placeat-cupiditate (npm)
- Aug 14, 2025
Malicious code in @zittertea/minima-distinctio-occaecati-dolorum (npm)
- Aug 14, 2025
Malicious code in @zittertea/maiores-quis-repellat (npm)
- Aug 14, 2025
Malicious code in @zittertea/libero-error-ex-enim (npm)
- Aug 14, 2025
Malicious code in @zittertea/laboriosam-maxime-deserunt-quo (npm)
- Aug 14, 2025
Malicious code in @zittertea/laboriosam-itaque-iste-aliquid (npm)
- Aug 14, 2025
Malicious code in @zittertea/ipsam-possimus-repellendus (npm)
- Aug 14, 2025
Malicious code in @zittertea/in-perferendis-voluptatum (npm)
- Aug 14, 2025
Malicious code in @zittertea/id-possimus-ipsa-veritatis (npm)
- Aug 14, 2025
Malicious code in @zittertea/expedita-ullam-modi (npm)
- Aug 14, 2025
Malicious code in @zittertea/excepturi-laboriosam-vitae-atque (npm)
- Aug 14, 2025
Malicious code in @zittertea/ex-blanditiis-dolore (npm)
- Aug 14, 2025
Malicious code in @zittertea/ex-autem-sequi (npm)
- Aug 14, 2025
Malicious code in @zittertea/eveniet-optio-incidunt (npm)
- Aug 14, 2025
Malicious code in @zittertea/earum-consectetur-quos-architecto (npm)
- Aug 14, 2025
Malicious code in @zittertea/ducimus-exercitationem-autem (npm)
- Aug 14, 2025
Malicious code in @zittertea/dolores-sequi-recusandae (npm)
- Aug 14, 2025
Malicious code in @zittertea/dolorem-enim-soluta-animi (npm)
- Aug 14, 2025
Malicious code in @zittertea/distinctio-amet-deleniti-quo (npm)
Page 6143 of 7,293