Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in soundrts (npm)
- Aug 14, 2025
Malicious code in soundoff (npm)
- Aug 14, 2025
Malicious code in soundmine (npm)
- Aug 14, 2025
Malicious code in soundee (npm)
- Aug 14, 2025
Malicious code in soundcloud-stream (npm)
- Aug 14, 2025
Malicious code in sosync (npm)
- Aug 14, 2025
Malicious code in sortsim (npm)
- Aug 14, 2025
Malicious code in sortcode (npm)
- Aug 14, 2025
Malicious code in sorbet-runtime-stub (npm)
- Aug 14, 2025
Malicious code in sorbet-rb (npm)
- Aug 14, 2025
Malicious code in soraneo-wallet-web (npm)
- Aug 14, 2025
Malicious code in sopolo (npm)
- Aug 14, 2025
Malicious code in sopipa (npm)
- Aug 14, 2025
Malicious code in sophos-localizations (npm)
- Aug 14, 2025
Malicious code in soomo-ui (npm)
- Aug 14, 2025
Malicious code in sonijohn (npm)
- Aug 14, 2025
Malicious code in sonicgame (npm)
- Aug 14, 2025
Malicious code in songwords (npm)
- Aug 14, 2025
Malicious code in song-z6fhn-g0hnk-yeti-project (npm)
- Aug 14, 2025
Malicious code in song-z62rq-uqmka-terra-project (npm)
- Aug 14, 2025
Malicious code in song-ytua9-lr9z1-nymph-project (npm)
- Aug 14, 2025
Malicious code in song-36t7m-akqee-dusk-project (npm)
- Aug 14, 2025
Malicious code in song-2dxrv-ugvt3-bramble-project (npm)
- Aug 14, 2025
Malicious code in sonerezh (npm)
- Aug 14, 2025
Malicious code in sonatype (npm)
- Aug 14, 2025
Malicious code in somtoday (npm)
- Aug 14, 2025
Malicious code in somepackagethatlupinsent (npm)
- Aug 14, 2025
Malicious code in some-neat-library (npm)
- Aug 14, 2025
Malicious code in solvix (npm)
- Aug 14, 2025
Malicious code in solstice_zhbqo_jvwoy_crown (npm)
- Aug 14, 2025
Malicious code in solstice_hu345_heho6_hush (npm)
- Aug 14, 2025
Malicious code in solstice_fow89_jhb20_fable (npm)
- Aug 14, 2025
Malicious code in solrtest (npm)
- Aug 14, 2025
Malicious code in solriser (npm)
- Aug 14, 2025
Malicious code in solonode (npm)
- Aug 14, 2025
Malicious code in solis-subduction-archaeometry-request (npm)
- Aug 14, 2025
Malicious code in solis-sagitta-bootstrap-altair (npm)
- Aug 14, 2025
Malicious code in solis-rimraf-cladistics-query (npm)
- Aug 14, 2025
Malicious code in solis-palynology-chromedriver-heka (npm)
- Aug 14, 2025
Malicious code in solis-kastra-rollup-io (npm)
- Aug 14, 2025
Malicious code in solis-exobiology-virgo-graviton (npm)
- Aug 14, 2025
Malicious code in solhint-rules (npm)
- Aug 14, 2025
Malicious code in solhint-plugin-erc2771 (npm)
- Aug 14, 2025
Malicious code in solemade (npm)
- Aug 14, 2025
Malicious code in soldemo (npm)
- Aug 14, 2025
Malicious code in solarnebula-sequelize-subscription-biogeochemistry (npm)
- Aug 14, 2025
Malicious code in solarnebula-nashira-galaxy-configstore (npm)
- Aug 14, 2025
Malicious code in solarnebula-higgs-transport-dorado (npm)
- Aug 14, 2025
Malicious code in solarnebula-exoplanet-mdx-australis (npm)
- Aug 14, 2025
Malicious code in solargl (npm)
Page 5349 of 6,665