Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in slot-gacor (npm)
- Aug 14, 2025
Malicious code in slm-env-unity3dball-v0 (npm)
- Aug 14, 2025
Malicious code in slircd (npm)
- Aug 14, 2025
Malicious code in slinters (npm)
- Aug 14, 2025
Malicious code in slingpic (npm)
- Aug 14, 2025
Malicious code in slidez (npm)
- Aug 14, 2025
Malicious code in slidev-kastra-hermes-jovian (npm)
- Aug 14, 2025
Malicious code in slidev-draco-publish-elara (npm)
- Aug 14, 2025
Malicious code in slidev-astro-jekyll-cz-conventional-changelog (npm)
- Aug 14, 2025
Malicious code in slides-sagitta-cassini-dione (npm)
- Aug 14, 2025
Malicious code in slides-request-jwt-draco (npm)
- Aug 14, 2025
Malicious code in slides-fork-kardashevscale-janus (npm)
- Aug 14, 2025
Malicious code in sliderize (npm)
- Aug 14, 2025
Malicious code in slickgame (npm)
- Aug 14, 2025
Malicious code in sliceview (npm)
- Aug 14, 2025
Malicious code in sliceseq (npm)
- Aug 14, 2025
Malicious code in slectron (npm)
- Aug 14, 2025
Malicious code in sldrbs (npm)
- Aug 14, 2025
Malicious code in slbench (npm)
- Aug 14, 2025
Malicious code in slayhud (npm)
- Aug 14, 2025
Malicious code in slate-sync (npm)
- Aug 14, 2025
Malicious code in slate-liquid-asset-loader (npm)
- Aug 14, 2025
Malicious code in slate-error (npm)
- Aug 14, 2025
Malicious code in slate-common-excludes (npm)
- Aug 14, 2025
Malicious code in slate-babel (npm)
- Aug 14, 2025
Malicious code in slamby-api (npm)
- Aug 14, 2025
Malicious code in slackub (npm)
- Aug 14, 2025
Malicious code in sl-em7-gql (npm)
- Aug 14, 2025
Malicious code in skyvue (npm)
- Aug 14, 2025
Malicious code in skyttle (npm)
- Aug 14, 2025
Malicious code in skyrider (npm)
- Aug 14, 2025
Malicious code in skyphp (npm)
- Aug 14, 2025
Malicious code in skyninja (npm)
- Aug 14, 2025
Malicious code in skynet-api-v2 (npm)
- Aug 14, 2025
Malicious code in skylove (npm)
- Aug 14, 2025
Malicious code in skylord (npm)
- Aug 14, 2025
Malicious code in skylon (npm)
- Aug 14, 2025
Malicious code in skyloftz (npm)
- Aug 14, 2025
Malicious code in skyflow-elements-update (npm)
- Aug 14, 2025
Malicious code in skydoc (npm)
- Aug 14, 2025
Malicious code in skybox-sdk (npm)
- Aug 14, 2025
Malicious code in skyasylum (npm)
- Aug 14, 2025
Malicious code in sky-tokr4-jfdg7-quill-project (npm)
- Aug 14, 2025
Malicious code in sky-krjyv-8ziol-tide-project (npm)
- Aug 14, 2025
Malicious code in sky-es669-2medd-lotus-project (npm)
- Aug 14, 2025
Malicious code in sky-c50dj-8j4vp-basil-project (npm)
- Aug 14, 2025
Malicious code in sky-c0ldu-jxvkc-quasar-project (npm)
- Aug 14, 2025
Malicious code in sky-5sl81-rwfmv-oracle-project (npm)
- Aug 14, 2025
Malicious code in skusim (npm)
- Aug 14, 2025
Malicious code in skudive (npm)
Page 5354 of 6,665