Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- MAL-2023-503Malwarenpmhomo-deus-a-brief-history-of-tomorrow-by-yuval-noah-harari-on-audible-new-version-May 10, 2023
Malicious code in homo-deus-a-brief-history-of-tomorrow-by-yuval-noah-harari-on-audible-new-version- (npm)
- MAL-2023-501Malwarenpmhit-makers-the-science-of-popularity-in-an-age-of-distraction-by-derek-thompson-on-ipad-new-version-May 10, 2023
Malicious code in hit-makers-the-science-of-popularity-in-an-age-of-distraction-by-derek-thompson-on-ipad-new-version- (npm)
- May 10, 2023
Malicious code in god-a-human-history-by-reza-aslan-on-ipad-new-version- (npm)
- MAL-2023-473Malwarenpmget-your-sht-together-how-to-stop-worrying-about-what-you-should-do-so-you-can-finish-what-you-need-May 10, 2023
Malicious code in get-your-sht-together-how-to-stop-worrying-about-what-you-should-do-so-you-can-finish-what-you-need- (npm)
- May 10, 2023
Malicious code in fierce-obsessions-the-phoenix-pack-6-by-suzanne-wright-online-new-pages- (npm)
- MAL-2023-286Malwarenpmdow-load-you-are-a-badass-at-making-money-master-the-mindset-of-wealth-by-jen-sincero-on-mMay 10, 2023
Malicious code in dow-load-you-are-a-badass-at-making-money-master-the-mindset-of-wealth-by-jen-sincero-on-m (npm)
- MAL-2023-284Malwarenpmdow-load-the-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version-May 10, 2023
Malicious code in dow-load-the-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version- (npm)
- May 10, 2023
Malicious code in dow-load-the-idea-of-you-by-robinne-lee-on-audiobook-full-volumes- (npm)
- May 10, 2023
Malicious code in dow-load-the-great-passage-by-shion-miura-on-ipad-full-edition- (npm)
- May 10, 2023
Malicious code in dow-load-the-best-we-could-do-by-thi-bui-on-ipad-new-format- (npm)
- MAL-2023-279Malwarenpmdow-load-stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes-May 10, 2023
Malicious code in dow-load-stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes- (npm)
- MAL-2023-276Malwarenpmdow-load-get-your-sht-together-how-to-stop-worrying-about-what-you-should-do-so-you-can-fiMay 10, 2023
Malicious code in dow-load-get-your-sht-together-how-to-stop-worrying-about-what-you-should-do-so-you-can-fi (npm)
- MAL-2023-275Malwarenpmdow-load-bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition-May 10, 2023
Malicious code in dow-load-bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition- (npm)
- MAL-2023-274Malwarenpmdow-load-becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-whilMay 10, 2023
Malicious code in dow-load-becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-whil (npm)
- MAL-2023-273Malwarenpmdow-load-beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-formMay 10, 2023
Malicious code in dow-load-beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-form (npm)
- MAL-2023-272Malwarenpmdow-load-all-systems-red-the-murderbot-diaries-1-by-martha-wells-online-new-volumes-May 10, 2023
Malicious code in dow-load-all-systems-red-the-murderbot-diaries-1-by-martha-wells-online-new-volumes- (npm)
- MAL-2023-245Malwarenpmdesigner-relationships-a-guide-to-happy-monogamy-positive-polyamory-and-optimistic-open-relationshipMay 10, 2023
Malicious code in designer-relationships-a-guide-to-happy-monogamy-positive-polyamory-and-optimistic-open-relationship (npm)
- May 10, 2023
Malicious code in conversations-with-friends-by-sally-rooney-on-audible-new-volumes- (npm)
- MAL-2023-143Malwarenpmbreaking-the-habit-of-being-yourself-how-to-lose-your-mind-and-create-a-new-one-by-joe-dispenza-on-mMay 10, 2023
Malicious code in breaking-the-habit-of-being-yourself-how-to-lose-your-mind-and-create-a-new-one-by-joe-dispenza-on-m (npm)
- May 10, 2023
Malicious code in bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition- (npm)
- May 10, 2023
Malicious code in born-to-win-find-your-success-by-zig-ziglar-on-iphone-new-version- (npm)
- May 10, 2023
Malicious code in born-of-water-elemental-origins-1-by-al-knorr-online-full-volumes- (npm)
- MAL-2023-125Malwarenpmbeginners-luck-chance-of-a-lifetime-1-by-kate-clayborn-on-audible-full-chapters-May 10, 2023
Malicious code in beginners-luck-chance-of-a-lifetime-1-by-kate-clayborn-on-audible-full-chapters- (npm)
- MAL-2023-123Malwarenpmbecoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-while-supplying-yourselMay 10, 2023
Malicious code in becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-while-supplying-yoursel (npm)
- MAL-2023-122Malwarenpmbeautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-format-May 10, 2023
Malicious code in beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-format- (npm)
- MAL-2023-1001Malwarenpmyou-are-a-badass-at-making-money-master-the-mindset-of-wealth-by-jen-sincero-on-mac-new-version-May 10, 2023
Malicious code in you-are-a-badass-at-making-money-master-the-mindset-of-wealth-by-jen-sincero-on-mac-new-version- (npm)
- May 10, 2023
Malware in born-of-water-elemental-origins-1-by-al-knorr-online-full-volumes-
1 compromised version
- GHSA-x87c-v2ff-w5mfMalwarenpmbecoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-while-supplying-yourselMay 10, 2023
Malware in becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-while-supplying-yoursel
1 compromised version
- GHSA-x73f-24c4-r4mmMalwarenpmdow-load-the-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version-May 10, 2023
Malware in dow-load-the-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version-
1 compromised version
- GHSA-x642-97p5-6mcmMalwarenpmtheft-by-finding-diaries-1977-2002-by-david-sedaris-on-kindle-new-pages-May 10, 2023
Malware in theft-by-finding-diaries-1977-2002-by-david-sedaris-on-kindle-new-pages-
1 compromised version
- GHSA-x5x6-j433-cgvqMalwarenpmdow-load-bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition-May 10, 2023
Malware in dow-load-bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition-
1 compromised version
- May 10, 2023
Malware in the-idea-of-you-by-robinne-lee-on-audiobook-full-volumes-
1 compromised version
- GHSA-wpqq-85vp-4vxmMalwarenpmdow-load-stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes-May 10, 2023
Malware in dow-load-stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes-
1 compromised version
- GHSA-vwqw-vg32-4pqmMalwarenpmbreaking-the-habit-of-being-yourself-how-to-lose-your-mind-and-create-a-new-one-by-joe-dispenza-on-mMay 10, 2023
Malware in breaking-the-habit-of-being-yourself-how-to-lose-your-mind-and-create-a-new-one-by-joe-dispenza-on-m
1 compromised version
- GHSA-v6m6-4rp9-p5mfMalwarenpmbound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition-May 10, 2023
Malware in bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition-
1 compromised version
- GHSA-rvc7-gx3w-3xprMalwarenpmdow-load-beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-formMay 10, 2023
Malware in dow-load-beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-form
1 compromised version
- GHSA-rjfx-xfh6-j594Malwarenpmbeginners-luck-chance-of-a-lifetime-1-by-kate-clayborn-on-audible-full-chapters-May 10, 2023
Malware in beginners-luck-chance-of-a-lifetime-1-by-kate-clayborn-on-audible-full-chapters-
1 compromised version
- May 10, 2023
Malware in a-love-letter-to-whiskey-by-kandi-steiner-on-iphone-new-version-
1 compromised version
- GHSA-r7mm-wvfx-7w89Malwarenpmpdf-gods-generals-the-military-lives-of-moses-the-buddha-and-muhammad-by-richard-a-gabriel-on-textboMay 10, 2023
Malware in pdf-gods-generals-the-military-lives-of-moses-the-buddha-and-muhammad-by-richard-a-gabriel-on-textbo
1 compromised version
- May 10, 2023
Malware in american-street-by-ibi-zoboi-on-kindle-full-pages-
1 compromised version
- May 10, 2023
Malware in dow-load-the-great-passage-by-shion-miura-on-ipad-full-edition-
1 compromised version
- GHSA-qw7q-vc26-rcm5Malwarenpmstepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes-May 10, 2023
Malware in stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes-
1 compromised version
- May 10, 2023
Malware in pucked-off-pucked-5-by-helena-hunting-on-audiobook-new-chapters-
1 compromised version
- GHSA-qgf2-h2r8-6qfxMalwarenpmyou-are-a-badass-at-making-money-master-the-mindset-of-wealth-by-jen-sincero-on-mac-new-version-May 10, 2023
Malware in you-are-a-badass-at-making-money-master-the-mindset-of-wealth-by-jen-sincero-on-mac-new-version-
1 compromised version
- GHSA-qfvc-vf47-wf35Malwarenpmdow-load-all-systems-red-the-murderbot-diaries-1-by-martha-wells-online-new-volumes-May 10, 2023
Malware in dow-load-all-systems-red-the-murderbot-diaries-1-by-martha-wells-online-new-volumes-
1 compromised version
- GHSA-q5c4-qh3g-hjw4Malwarenpmthe-subtle-art-of-not-giving-a-fck-a-counterintuitive-approach-to-living-a-good-life-by-mark-manson-May 10, 2023
Malware in the-subtle-art-of-not-giving-a-fck-a-counterintuitive-approach-to-living-a-good-life-by-mark-manson-
1 compromised version
- GHSA-mxvp-2w67-8638Malwarenpmfierce-obsessions-the-phoenix-pack-6-by-suzanne-wright-online-new-pages-May 10, 2023
Malware in fierce-obsessions-the-phoenix-pack-6-by-suzanne-wright-online-new-pages-
1 compromised version
- GHSA-mp5w-x7vp-mmfxMalwarenpmpdf-the-daily-stoic-366-meditations-on-wisdom-perseverance-and-the-art-of-living-by-ryan-holiday-on-May 10, 2023
Malware in pdf-the-daily-stoic-366-meditations-on-wisdom-perseverance-and-the-art-of-living-by-ryan-holiday-on-
1 compromised version
- May 10, 2023
Malware in conversations-with-friends-by-sally-rooney-on-audible-new-volumes-
1 compromised version
- GHSA-m7pf-x3w7-82c2Malwarenpmthe-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version-May 10, 2023
Malware in the-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version-
1 compromised version
Page 6851 of 7,305