Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in swan-violet-uzt995-project (npm)
- Aug 14, 2025
Malicious code in swan-savanna-kir735-project (npm)
- Aug 14, 2025
Malicious code in swan-rainbow-pfb803-project (npm)
- Aug 14, 2025
Malicious code in swan-quilt-zjk050-project (npm)
- Aug 14, 2025
Malicious code in swan-quartz-wbj886-project (npm)
- Aug 14, 2025
Malicious code in swan-piano-mtk716-project (npm)
- Aug 14, 2025
Malicious code in swan-nugget-ypo135-project (npm)
- Aug 14, 2025
Malicious code in swan-moon-xmh465-project (npm)
- Aug 14, 2025
Malicious code in swan-gorge-tpi279-project (npm)
- Aug 14, 2025
Malicious code in swan-delta-stt348-project (npm)
- Aug 14, 2025
Malicious code in swan-albatross-wmh804-project (npm)
- Aug 14, 2025
Malicious code in swaggerflowtypes (npm)
- Aug 14, 2025
Malicious code in swagger-to-server (npm)
- Aug 14, 2025
Malicious code in swa-persistence (npm)
- Aug 14, 2025
Malicious code in sw3mgw (npm)
- Aug 14, 2025
Malicious code in sw-reporter (npm)
- Aug 14, 2025
Malicious code in svplayer (npm)
- Aug 14, 2025
Malicious code in svnurl (npm)
- Aug 14, 2025
Malicious code in svnrepo (npm)
- Aug 14, 2025
Malicious code in svmacs (npm)
- Aug 14, 2025
Malicious code in svhakbucfimyqljk (npm)
- Aug 14, 2025
Malicious code in svg-presentation (npm)
- Aug 14, 2025
Malicious code in svg-page-browser (npm)
- Aug 14, 2025
Malicious code in svg-mixer-test (npm)
- Aug 14, 2025
Malicious code in svg-config-viewer (npm)
- Aug 14, 2025
Malicious code in svenum (npm)
- Aug 14, 2025
Malicious code in sveltejs (npm)
- Aug 14, 2025
Malicious code in sv-floorplan (npm)
- Aug 14, 2025
Malicious code in suvijay (npm)
- Aug 14, 2025
Malicious code in sutterhealth-ui-toolkit-widgets (npm)
- Aug 14, 2025
Malicious code in sutter-rdd-services (npm)
- Aug 14, 2025
Malicious code in sutter-health-widgets (npm)
- Aug 14, 2025
Malicious code in sutter-health-user-authentication (npm)
- Aug 14, 2025
Malicious code in sutter-health-eval (npm)
- Aug 14, 2025
Malicious code in sutter-health-data-services (npm)
- Aug 14, 2025
Malicious code in sutter-health-analytics (npm)
- Aug 14, 2025
Malicious code in susy-flexbox (npm)
- Aug 14, 2025
Malicious code in sus-support (npm)
- Aug 14, 2025
Malicious code in suryasetyani (npm)
- Aug 14, 2025
Malicious code in surya-ubi6-sukiwir (npm)
- Aug 14, 2025
Malicious code in surya-tapai89-kuki (npm)
- Aug 14, 2025
Malicious code in surya-sego36-sukiwir (npm)
- Aug 14, 2025
Malicious code in surya-nasi84-kuki (npm)
- Aug 14, 2025
Malicious code in surya-martabak100-breki (npm)
- Aug 14, 2025
Malicious code in surya-bubursumsum8-breki (npm)
- Aug 14, 2025
Malicious code in survtest (npm)
- Aug 14, 2025
Malicious code in surpaonchainagent (npm)
- Aug 14, 2025
Malicious code in suriyan (npm)
- Aug 14, 2025
Malicious code in surebets (npm)
- Aug 14, 2025
Malicious code in supervisor-spectroscopy-tardigrade-native (npm)
Page 5337 of 6,665