Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in sshvbox (npm)
- Aug 14, 2025
Malicious code in sshove (npm)
- Aug 14, 2025
Malicious code in sshexe (npm)
- Aug 14, 2025
Malicious code in ssh-eventlogger (npm)
- Aug 14, 2025
Malicious code in ssenss (npm)
- Aug 14, 2025
Malicious code in sscheme (npm)
- Aug 14, 2025
Malicious code in ssc-cdt3-lite (npm)
- Aug 14, 2025
Malicious code in ssandsp (npm)
- Aug 14, 2025
Malicious code in srtraficante (npm)
- Aug 14, 2025
Malicious code in srtmdata (npm)
- Aug 14, 2025
Malicious code in srnode (npm)
- Aug 14, 2025
Malicious code in srikanth (npm)
- Aug 14, 2025
Malicious code in srihash.org (npm)
- Aug 14, 2025
Malicious code in srhnhm (npm)
- Aug 14, 2025
Malicious code in srcgetpy (npm)
- Aug 14, 2025
Malicious code in srcclr (npm)
- Aug 14, 2025
Malicious code in src.collection-bb-blocks (npm)
- Aug 14, 2025
Malicious code in src-rn-extra (npm)
- Aug 14, 2025
Malicious code in src-rn (npm)
- Aug 14, 2025
Malicious code in srbaukldpofwxkec (npm)
- Aug 14, 2025
Malicious code in sqwiggle (npm)
- Aug 14, 2025
Malicious code in squpdxkmrebjgoiz (npm)
- Aug 14, 2025
Malicious code in squizer (npm)
- Aug 14, 2025
Malicious code in squirrelmon_web (npm)
- Aug 14, 2025
Malicious code in squirrelmon_server (npm)
- Aug 14, 2025
Malicious code in squirrelmon_agent (npm)
- Aug 14, 2025
Malicious code in squirrelminify (npm)
- Aug 14, 2025
Malicious code in squidwork (npm)
- Aug 14, 2025
Malicious code in squidge (npm)
- Aug 14, 2025
Malicious code in squadlist (npm)
- Aug 14, 2025
Malicious code in squade (npm)
- Aug 14, 2025
Malicious code in sqream (npm)
- Aug 14, 2025
Malicious code in sqoogl (npm)
- Aug 14, 2025
Malicious code in sqljoins (npm)
- Aug 14, 2025
Malicious code in sqlite-quantum-computing-forever-despina (npm)
- Aug 14, 2025
Malicious code in sqlite-graviton-photon-lithosphere (npm)
- Aug 14, 2025
Malicious code in sqlite-glaciology-publish-slides (npm)
- Aug 14, 2025
Malicious code in sqlite-command-luminescence-command (npm)
- Aug 14, 2025
Malicious code in sqlite-cluster-xenon-apollo (npm)
- Aug 14, 2025
Malicious code in sqlite-apollo-jsonp-heka (npm)
- Aug 14, 2025
Malicious code in sqldbproj (npm)
- Aug 14, 2025
Malicious code in sql-web-console (npm)
- Aug 14, 2025
Malicious code in sql-logs-migration-service (npm)
- Aug 14, 2025
Malicious code in sqarenet (npm)
- Aug 14, 2025
Malicious code in spy-promise-pi-decode-cold (npm)
- Aug 14, 2025
Malicious code in spwnawef3 (npm)
- Aug 14, 2025
Malicious code in spwaia (npm)
- Aug 14, 2025
Malicious code in spv-styleguide (npm)
- Aug 14, 2025
Malicious code in spruce-utopia-xbi904-project (npm)
- Aug 14, 2025
Malicious code in spruce-umbra-e84w (npm)
Page 5345 of 6,665