Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in solara-roblox (npm)
5 compromised versions
- Aug 14, 2025
Malicious code in solara-patcher-legacy (npm)
1 compromised version
- Aug 14, 2025
Malicious code in solana-wallet-discord-tracker (npm)
- Aug 14, 2025
Malicious code in solana-utils-sdk (npm)
- Aug 14, 2025
Malicious code in solace_z5s6g_mksge_moon (npm)
- Aug 14, 2025
Malicious code in solace_es7sz_t51gp_whisper (npm)
- Aug 14, 2025
Malicious code in solace_c82z2_kgeuo_fireworks (npm)
- Aug 14, 2025
Malicious code in solace_8we84_ndxmq_unicorn (npm)
- Aug 14, 2025
Malicious code in solace-xu1ut-rbll3-haven-project (npm)
- Aug 14, 2025
Malicious code in solace-qxoli-6mtci-rose-project (npm)
- Aug 14, 2025
Malicious code in solace-pguaq-e5wjq-coral-project (npm)
- Aug 14, 2025
Malicious code in solace-mu74p-ejd2u-verdant-project (npm)
- Aug 14, 2025
Malicious code in solace-fancy-gck139-project (npm)
- Aug 14, 2025
Malicious code in solace-brr3b-a5o89-velvet-project (npm)
- Aug 14, 2025
Malicious code in solace-3tzjm-jc60e-ember-project (npm)
- Aug 14, 2025
Malicious code in soket.js (npm)
- Aug 14, 2025
Malicious code in soket.io (npm)
- Aug 14, 2025
Malicious code in sokahub (npm)
- Aug 14, 2025
Malicious code in soiostest (npm)
- Aug 14, 2025
Malicious code in soheil-2-rj (npm)
- Aug 14, 2025
Malicious code in soheil-1-rj (npm)
- Aug 14, 2025
Malicious code in softzip (npm)
- Aug 14, 2025
Malicious code in softer_delete (npm)
- Aug 14, 2025
Malicious code in soft-metrika (npm)
- Aug 14, 2025
Malicious code in socyal (npm)
- Aug 14, 2025
Malicious code in socomsa (npm)
- Aug 14, 2025
Malicious code in socks-browser (npm)
- Aug 14, 2025
Malicious code in socklibng (npm)
- Aug 14, 2025
Malicious code in socketmp (npm)
- Aug 14, 2025
Malicious code in socketio-equinox-thuban-superflare (npm)
- Aug 14, 2025
Malicious code in socketio-await-volcanology-bellatrix (npm)
- Aug 14, 2025
Malicious code in socket.io.js (npm)
- Aug 14, 2025
Malicious code in socket.io-rails (npm)
- Aug 14, 2025
Malicious code in socket-test-vulnerable (npm)
- Aug 14, 2025
Malicious code in socket-tau-psi-daemon-upsilon (npm)
- Aug 14, 2025
Malicious code in socket-socker (npm)
- Aug 14, 2025
Malicious code in socket-first-level-dep-1 (npm)
- Aug 14, 2025
Malicious code in socket-first-level-dep (npm)
- Aug 14, 2025
Malicious code in sock-2 (npm)
- Aug 14, 2025
Malicious code in sock-1 (npm)
- Aug 14, 2025
Malicious code in sociobiology-markdown-arcturus-xenon (npm)
- Aug 14, 2025
Malicious code in sociobiology-exoplanetology-less-loader-sagitta (npm)
- Aug 14, 2025
Malicious code in sociobiology-dagda-kardashevscale-procyon (npm)
- Aug 14, 2025
Malicious code in sociam (npm)
- Aug 14, 2025
Malicious code in socialinit (npm)
- Aug 14, 2025
Malicious code in socfetch (npm)
- Aug 14, 2025
Malicious code in sobojohn (npm)
- Aug 14, 2025
Malicious code in soautils (npm)
- Aug 14, 2025
Malicious code in soarrobot (npm)
- Aug 14, 2025
Malicious code in soap-titan-terser-webpack-plugin-betelgeuse (npm)
Page 5350 of 6,665