Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in soap-sirius-delphinus-brane (npm)
- Aug 14, 2025
Malicious code in soap-repository (npm)
- Aug 14, 2025
Malicious code in soap-local-celeste-magellan (npm)
- Aug 14, 2025
Malicious code in soap-jsonp-registry-local (npm)
- Aug 14, 2025
Malicious code in soap-gravity-jsonp-oauth (npm)
- Aug 14, 2025
Malicious code in soap-fetch-sociobiology-winston (npm)
- Aug 14, 2025
Malicious code in soafinals (npm)
- Aug 14, 2025
Malicious code in snyk-follow-npm (npm)
- Aug 14, 2025
Malicious code in snuffy (npm)
- Aug 14, 2025
Malicious code in sns-to-pubusb (npm)
- Aug 14, 2025
Malicious code in snpdist (npm)
- Aug 14, 2025
Malicious code in snowflake-quinoa-scad (npm)
- Aug 14, 2025
Malicious code in snowflake-quince-z0se (npm)
- Aug 14, 2025
Malicious code in snowflake-mike-df6q (npm)
- Aug 14, 2025
Malicious code in snowflake-heliosphere-k5is (npm)
- Aug 14, 2025
Malicious code in snowflake-ferry-l8fi (npm)
- Aug 14, 2025
Malicious code in snowdroid-plugin-popsicle (npm)
- Aug 14, 2025
Malicious code in snowdroid-plugin-lemon (npm)
- Aug 14, 2025
Malicious code in snowdroid-phonegap-fban (npm)
- Aug 14, 2025
Malicious code in snow_vx1a0_h5bnx_raven (npm)
- Aug 14, 2025
Malicious code in snow_ub2tz_mcq5b_terra (npm)
- Aug 14, 2025
Malicious code in snow_tffx8_orlki_coral (npm)
- Aug 14, 2025
Malicious code in snow_qsiuy_dq0ft_twilight (npm)
- Aug 14, 2025
Malicious code in snow_lpg8m_g4poi_limestone (npm)
- Aug 14, 2025
Malicious code in snow_gv3tl_ns1i2_thunder (npm)
- Aug 14, 2025
Malicious code in snow_7spsr_kh0km_fern (npm)
- Aug 14, 2025
Malicious code in snorocket (npm)
- Aug 14, 2025
Malicious code in snorobot (npm)
- Aug 14, 2025
Malicious code in snodejsfb (npm)
- Aug 14, 2025
Malicious code in snipsnip (npm)
- Aug 14, 2025
Malicious code in snipr (npm)
- Aug 14, 2025
Malicious code in sninja (npm)
- Aug 14, 2025
Malicious code in sngyai (npm)
- Aug 14, 2025
Malicious code in snes-game-names (npm)
- Aug 14, 2025
Malicious code in snapnet (npm)
- Aug 14, 2025
Malicious code in snapgram (npm)
- Aug 14, 2025
Malicious code in snapchat-score995 (npm)
- Aug 14, 2025
Malicious code in snapchat-score876 (npm)
- Aug 14, 2025
Malicious code in snapchat-score683 (npm)
- Aug 14, 2025
Malicious code in snapchat-score511 (npm)
- Aug 14, 2025
Malicious code in snapchat-score413 (npm)
- Aug 14, 2025
Malicious code in snapchat-score360 (npm)
- Aug 14, 2025
Malicious code in snapchat-score298 (npm)
- Aug 14, 2025
Malicious code in snapchat-score276 (npm)
- Aug 14, 2025
Malicious code in snapchat-score106 (npm)
- Aug 14, 2025
Malicious code in snapchat-score-rewards641 (npm)
- Aug 14, 2025
Malicious code in snapchat-score-new396 (npm)
- Aug 14, 2025
Malicious code in snapchat-score-new-quizlet-match877 (npm)
- Aug 14, 2025
Malicious code in snapchat-score-new-panel373 (npm)
- Aug 14, 2025
Malicious code in snapchat-score-new-link584 (npm)
Page 5351 of 6,665