Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in steam-digital-card-card108 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today850 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today763 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today660 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today528 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today050 (npm)
- Aug 14, 2025
Malicious code in stealjon2 (npm)
- Aug 14, 2025
Malicious code in stealjon (npm)
- Aug 14, 2025
Malicious code in steal-ur-stuff (npm)
- Aug 14, 2025
Malicious code in staymo (npm)
- Aug 14, 2025
Malicious code in stax-cli (npm)
- Aug 14, 2025
Malicious code in stautses (npm)
- Aug 14, 2025
Malicious code in statusyo (npm)
- Aug 14, 2025
Malicious code in statuscml (npm)
- Aug 14, 2025
Malicious code in statusaas (npm)
- Aug 14, 2025
Malicious code in statsd-instrument (npm)
- Aug 14, 2025
Malicious code in stats-pattern-library (npm)
- Aug 14, 2025
Malicious code in stats-core-js-react-components (npm)
- Aug 14, 2025
Malicious code in statom (npm)
- Aug 14, 2025
Malicious code in stationery-themes (npm)
- Aug 14, 2025
Malicious code in static-view-bad-easy-tree (npm)
- Aug 14, 2025
Malicious code in static-jmodule (npm)
- Aug 14, 2025
Malicious code in starwars-names-lib2 (npm)
- Aug 14, 2025
Malicious code in start-scorpius-toml-build (npm)
- Aug 14, 2025
Malicious code in start-quito-pino-kardashevscale (npm)
- Aug 14, 2025
Malicious code in stars-colors (npm)
- Aug 14, 2025
Malicious code in stars-color (npm)
- Aug 14, 2025
Malicious code in starmaint (npm)
- Aug 14, 2025
Malicious code in starkok (npm)
- Aug 14, 2025
Malicious code in starii (npm)
- Aug 14, 2025
Malicious code in stardork (npm)
- Aug 14, 2025
Malicious code in starcrash (npm)
- Aug 14, 2025
Malicious code in starchup-integrator (npm)
- Aug 14, 2025
Malicious code in starbucks (npm)
- Aug 14, 2025
Malicious code in star-xcscn-3co6s-moonlight-project (npm)
- Aug 14, 2025
Malicious code in star-x0bar-6z7rk-kelp-project (npm)
- Aug 14, 2025
Malicious code in star-volcano-sfm016-project (npm)
- Aug 14, 2025
Malicious code in star-violet-rum512-project (npm)
- Aug 14, 2025
Malicious code in star-topaz-rxz949-project (npm)
- Aug 14, 2025
Malicious code in star-tide-efs535-project (npm)
- Aug 14, 2025
Malicious code in star-thunder-ija894-project (npm)
- Aug 14, 2025
Malicious code in star-t8z5p-kwjzn-fern-project (npm)
- Aug 14, 2025
Malicious code in star-su6b7-28fkl-quasar-project (npm)
- Aug 14, 2025
Malicious code in star-spruce-ftf365-project (npm)
- Aug 14, 2025
Malicious code in star-nugget-aeu696-project (npm)
- Aug 14, 2025
Malicious code in star-nimbus-koc547-project (npm)
- Aug 14, 2025
Malicious code in star-meadow-ftp720-project (npm)
- Aug 14, 2025
Malicious code in star-jungle-wzr074-project (npm)
- Aug 14, 2025
Malicious code in star-falcon-jxi928-project (npm)
- Aug 14, 2025
Malicious code in star-execute-float-try-earth (npm)
Page 5343 of 6,665