Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in sunruse-influx-cli (npm)
- Aug 14, 2025
Malicious code in sunmoon (npm)
- Aug 14, 2025
Malicious code in sunjaydut (npm)
- Aug 14, 2025
Malicious code in sunarp (npm)
- Aug 14, 2025
Malicious code in sun-cloud-sudo-array-benchmark (npm)
- Aug 14, 2025
Malicious code in summoners (npm)
- Aug 14, 2025
Malicious code in summaryze (npm)
- Aug 14, 2025
Malicious code in sujycqmzpahrvbft (npm)
- Aug 14, 2025
Malicious code in suite-level-tags (npm)
- Aug 14, 2025
Malicious code in suimello (npm)
- Aug 14, 2025
Malicious code in suharno (npm)
- Aug 14, 2025
Malicious code in sugr (npm)
- Aug 14, 2025
Malicious code in sugarftp (npm)
- Aug 14, 2025
Malicious code in sugar-test-core-separation (npm)
- Aug 14, 2025
Malicious code in sugar-es7 (npm)
- Aug 14, 2025
Malicious code in sugar-core-test (npm)
- Aug 14, 2025
Malicious code in suerpeng (npm)
- Aug 14, 2025
Malicious code in suepluxie (npm)
1 compromised version
- Aug 14, 2025
Malicious code in sudoesiee (npm)
- Aug 14, 2025
Malicious code in sudo-resolve-deserialize-file-cloud (npm)
- Aug 14, 2025
Malicious code in sudo-hash-hash-public-void (npm)
- Aug 14, 2025
Malicious code in sudo-compile-visualize-rho-fast (npm)
- Aug 14, 2025
Malicious code in suddenly-tin-proud (npm)
- Aug 14, 2025
Malicious code in sucscss (npm)
- Aug 14, 2025
Malicious code in subverse (npm)
- Aug 14, 2025
Malicious code in subtitles-cli (npm)
- Aug 14, 2025
Malicious code in substuff (npm)
- Aug 14, 2025
Malicious code in substance-thrown-pair (npm)
- Aug 14, 2025
Malicious code in subscription-void-sirius-kardashevscale (npm)
- Aug 14, 2025
Malicious code in subscription-virgo-cosmiconfig-nodemon (npm)
- Aug 14, 2025
Malicious code in subscription-futurology-transform-parcel (npm)
- Aug 14, 2025
Malicious code in subscription-cross-env-dione-protractor (npm)
- Aug 14, 2025
Malicious code in submarino (npm)
- Aug 14, 2025
Malicious code in sublimation-toml-cluster-gridsome (npm)
- Aug 14, 2025
Malicious code in sublimation-semantic-ui-enif-react-bootstrap (npm)
- Aug 14, 2025
Malicious code in sublimation-radiant-less-loader-ablation (npm)
- Aug 14, 2025
Malicious code in sublimation-ionosphere-quasar-darkmatter (npm)
- Aug 14, 2025
Malicious code in sublimation-docusaurus-hermes-avior (npm)
- Aug 14, 2025
Malicious code in sublimation-astroinformatics-mineralogy-rimraf (npm)
- Aug 14, 2025
Malicious code in subliime (npm)
- Aug 14, 2025
Malicious code in subduction-pulsar-markdownlint-pino-pretty (npm)
- Aug 14, 2025
Malicious code in subduction-node-config-event-browserify (npm)
- Aug 14, 2025
Malicious code in subduction-nestjs-supercluster-norma (npm)
- Aug 14, 2025
Malicious code in subduction-nconf-prosthetics-nebula (npm)
- Aug 14, 2025
Malicious code in subduction-mira-scripts-mongoose (npm)
- Aug 14, 2025
Malicious code in subduction-exec-mutation-betelgeuse (npm)
- Aug 14, 2025
Malicious code in subcrunch (npm)
- Aug 14, 2025
Malicious code in suanfas (npm)
- Aug 14, 2025
Malicious code in suaneotvrcpqjyxk (npm)
- Aug 14, 2025
Malicious code in stynbb (npm)
Page 5339 of 6,665