Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in sktchfb (npm)
- Aug 14, 2025
Malicious code in skomakare (npm)
- Aug 14, 2025
Malicious code in skkwipthjqzlygvo (npm)
- Aug 14, 2025
Malicious code in skjapp (npm)
- Aug 14, 2025
Malicious code in skitest (npm)
- Aug 14, 2025
Malicious code in skipstone (npm)
- Aug 14, 2025
Malicious code in skiprj (npm)
- Aug 14, 2025
Malicious code in skip-package (npm)
- Aug 14, 2025
Malicious code in skionline (npm)
- Aug 14, 2025
Malicious code in skimmdit (npm)
- Aug 14, 2025
Malicious code in skillsdb (npm)
- Aug 14, 2025
Malicious code in skeynjqwmpfgklth (npm)
- Aug 14, 2025
Malicious code in sketchz (npm)
- Aug 14, 2025
Malicious code in skeletom (npm)
- Aug 14, 2025
Malicious code in skateshop (npm)
- Aug 14, 2025
Malicious code in skalcirdhmugztoe (npm)
- Aug 14, 2025
Malicious code in skalch (npm)
- Aug 14, 2025
Malicious code in sk-ui-kit (npm)
- Aug 14, 2025
Malicious code in sk-datatable (npm)
- Aug 14, 2025
Malicious code in sjtu-seyilingliu-dast (npm)
- Aug 14, 2025
Malicious code in sjtu-sesanyiwu-os (npm)
- Aug 14, 2025
Malicious code in sjtu-sesanwuyi-arch (npm)
- Aug 14, 2025
Malicious code in sjtu-sesanwuling-adv-info-sys (npm)
- Aug 14, 2025
Malicious code in sjtu-sesansisan-adv-arch (npm)
- Aug 14, 2025
Malicious code in sjtu-sesansijiu-data-mining (npm)
- Aug 14, 2025
Malicious code in sjtu-sesansiba-info-sys-engi (npm)
- Aug 14, 2025
Malicious code in sjtu-sesansaner-info-sys-intro (npm)
- Aug 14, 2025
Malicious code in sjtu-seeryier-db (npm)
- Aug 14, 2025
Malicious code in sjtu-seererwu-test (npm)
- Aug 14, 2025
Malicious code in sjtu-seerersi-engi (npm)
- Aug 14, 2025
Malicious code in sjtu-seererqi-cse (npm)
- Aug 14, 2025
Malicious code in sjtu-seererliu-comp (npm)
- Aug 14, 2025
Malicious code in sjtu-seererer-algo (npm)
- Aug 14, 2025
Malicious code in sjtu-seererba-web-dev (npm)
- Aug 14, 2025
Malicious code in sjhsapp (npm)
- Aug 14, 2025
Malicious code in sj-tw-test-security (npm)
- Aug 14, 2025
Malicious code in sj-tw-sec (npm)
- Aug 14, 2025
Malicious code in sj-tw-abc (npm)
- Aug 14, 2025
Malicious code in sj-labc (npm)
- Aug 14, 2025
Malicious code in sizewise (npm)
- Aug 14, 2025
Malicious code in siyiadnew (npm)
- Aug 14, 2025
Malicious code in sixsteps (npm)
- Aug 14, 2025
Malicious code in sixers-jersey---nba-jersey (npm)
- Aug 14, 2025
Malicious code in sixcam (npm)
- Aug 14, 2025
Malicious code in sivkxudmhgbefokz (npm)
- Aug 14, 2025
Malicious code in sitforc (npm)
- Aug 14, 2025
Malicious code in sitejoias (npm)
- Aug 14, 2025
Malicious code in sitefoil (npm)
- Aug 14, 2025
Malicious code in sita-tea (npm)
- Aug 14, 2025
Malicious code in sisyphe-xpath (npm)
Page 5355 of 6,665