Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in supervisor-proxima-tailwindcss-frontend (npm)
- Aug 14, 2025
Malicious code in supervisor-json-winston-bulma (npm)
- Aug 14, 2025
Malicious code in supervisor-graviton-triton-iota (npm)
- Aug 14, 2025
Malicious code in supervisor-draco-socketio-hapi (npm)
- Aug 14, 2025
Malicious code in superslotmax (npm)
- Aug 14, 2025
Malicious code in superposition-leda-karma-neptune (npm)
- Aug 14, 2025
Malicious code in superposition-dagda-baryon-blackhole (npm)
- Aug 14, 2025
Malicious code in superposition-cosmochemistry-elektra-upgrade (npm)
- Aug 14, 2025
Malicious code in supernova-zest-baqn (npm)
- Aug 14, 2025
Malicious code in supernova-yam-cug4 (npm)
- Aug 14, 2025
Malicious code in supernova-romeo-uatb (npm)
- Aug 14, 2025
Malicious code in supernova-reef-zlot (npm)
- Aug 14, 2025
Malicious code in supernova-quince-ueq6 (npm)
- Aug 14, 2025
Malicious code in supermarket-pages (npm)
- Aug 14, 2025
Malicious code in superhappyfuntime (npm)
- Aug 14, 2025
Malicious code in supergrep (npm)
- Aug 14, 2025
Malicious code in superflare-react-bootstrap-playwright-antares (npm)
- Aug 14, 2025
Malicious code in superflare-fork-pyxis-redis (npm)
- Aug 14, 2025
Malicious code in superflare-exec-selenium-gravitationalwave (npm)
- Aug 14, 2025
Malicious code in superflare-epimetheus-typeorm-archaeoastronomy (npm)
- Aug 14, 2025
Malicious code in superflare-centaurus-exosphere-adonis (npm)
- Aug 14, 2025
Malicious code in superflare-cache-eigenstate-xenos (npm)
- Aug 14, 2025
Malicious code in superdupertopsecretclassifiedsourcecode (npm)
- Aug 14, 2025
Malicious code in superdeep (npm)
- Aug 14, 2025
Malicious code in supercluster-sass-loader-cosmos-react-bootstrap (npm)
- Aug 14, 2025
Malicious code in supercluster-less-meteor-capella (npm)
- Aug 14, 2025
Malicious code in supercamp (npm)
- Aug 14, 2025
Malicious code in supercal (npm)
- Aug 14, 2025
Malicious code in superagent-process-hermes-antares (npm)
- Aug 14, 2025
Malicious code in superagent-miranda-selenium-dynamo (npm)
- Aug 14, 2025
Malicious code in super-scraper-client (npm)
- Aug 14, 2025
Malicious code in super-private-danger (npm)
- Aug 14, 2025
Malicious code in sunset-whale-zab065-project (npm)
- Aug 14, 2025
Malicious code in sunset-violet-yjd086-project (npm)
- Aug 14, 2025
Malicious code in sunset-vine-nzo557-project (npm)
- Aug 14, 2025
Malicious code in sunset-quasar-rbi320-project (npm)
- Aug 14, 2025
Malicious code in sunset-quail-pmh997-project (npm)
- Aug 14, 2025
Malicious code in sunset-honey-ukw334-project (npm)
- Aug 14, 2025
Malicious code in sunset-fox-que866-project (npm)
- Aug 14, 2025
Malicious code in sunset-fern-aiv334-project (npm)
- Aug 14, 2025
Malicious code in sunset-evergreen-pbm762-project (npm)
- Aug 14, 2025
Malicious code in sunset-acorn-ske135-project (npm)
- Aug 14, 2025
Malicious code in sunruse-math-vector (npm)
- Aug 14, 2025
Malicious code in sunruse-math-aabb (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-toolchain (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-platforms-javascript (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-platforms-helpers (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-platforms-c (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-libraries (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-grunt (npm)
Page 5338 of 6,665