Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in snap-score-meaning010 (npm)
- Aug 14, 2025
Malicious code in snap-score-increase781 (npm)
- Aug 14, 2025
Malicious code in snap-score-increase747 (npm)
- Aug 14, 2025
Malicious code in snap-score-glitch-app589 (npm)
- Aug 14, 2025
Malicious code in snap-design-system (npm)
- Aug 14, 2025
Malicious code in smzdmplus (npm)
- Aug 14, 2025
Malicious code in smx-livescores (npm)
- Aug 14, 2025
Malicious code in smudging (npm)
- Aug 14, 2025
Malicious code in sms-stedin-leveringsherstel (npm)
- Aug 14, 2025
Malicious code in sms-stedin-filters (npm)
- Aug 14, 2025
Malicious code in sms-stedin-afronden (npm)
- Aug 14, 2025
Malicious code in smplpdo (npm)
- Aug 14, 2025
Malicious code in smooth_scheduler (npm)
- Aug 14, 2025
Malicious code in smitch (npm)
- Aug 14, 2025
Malicious code in smilescan (npm)
- Aug 14, 2025
Malicious code in smilemile (npm)
- Aug 14, 2025
Malicious code in smiile (npm)
- Aug 14, 2025
Malicious code in smfeeder (npm)
- Aug 14, 2025
Malicious code in smfdates (npm)
- Aug 14, 2025
Malicious code in smederevo_888 (npm)
- Aug 14, 2025
Malicious code in smederevo (npm)
- Aug 14, 2025
Malicious code in smc-bacnet-explorer (npm)
- Aug 14, 2025
Malicious code in smashoapi (npm)
- Aug 14, 2025
Malicious code in smashbug (npm)
- Aug 14, 2025
Malicious code in smarttags (npm)
- Aug 14, 2025
Malicious code in smartsign-deferred (npm)
- Aug 14, 2025
Malicious code in smartserve-loader (npm)
- Aug 14, 2025
Malicious code in smartsearchwp (npm)
- Aug 14, 2025
Malicious code in smartqr (npm)
- Aug 14, 2025
Malicious code in smartnc (npm)
- Aug 14, 2025
Malicious code in smarth (npm)
- Aug 14, 2025
Malicious code in smart_todo (npm)
- Aug 14, 2025
Malicious code in smallstat (npm)
- Aug 14, 2025
Malicious code in small-void-rain-unix-upsilon (npm)
- Aug 14, 2025
Malicious code in small-psi-unix-execute-report (npm)
- Aug 14, 2025
Malicious code in small-private-integer-array-deploy (npm)
- Aug 14, 2025
Malicious code in small-encrypt-orchestrate-star-grid (npm)
- Aug 14, 2025
Malicious code in small-debug-awk-hash-parse (npm)
- Aug 14, 2025
Malicious code in sm-tracker (npm)
- Aug 14, 2025
Malicious code in sm-app (npm)
- Aug 14, 2025
Malicious code in slymztest (npm)
- Aug 14, 2025
Malicious code in slush-slush-rr (npm)
- Aug 14, 2025
Malicious code in slush-ng-blank (npm)
- Aug 14, 2025
Malicious code in slugwiki (npm)
- Aug 14, 2025
Malicious code in sls-wallet-orders (npm)
- Aug 14, 2025
Malicious code in slowpost (npm)
- Aug 14, 2025
Malicious code in slow-moon-air-scale-interpret (npm)
- Aug 14, 2025
Malicious code in slot88 (npm)
- Aug 14, 2025
Malicious code in slot777 (npm)
- Aug 14, 2025
Malicious code in slot-online (npm)
Page 5353 of 6,665