Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in sisyphe-xml (npm)
- Aug 14, 2025
Malicious code in sisyphe-pdf (npm)
- Aug 14, 2025
Malicious code in sisyphe-out (npm)
- Aug 14, 2025
Malicious code in sisyphe-filetype (npm)
- Aug 14, 2025
Malicious code in sisyphe (npm)
- Aug 14, 2025
Malicious code in sisteme (npm)
- Aug 14, 2025
Malicious code in sisren (npm)
- Aug 14, 2025
Malicious code in sisprom (npm)
- Aug 14, 2025
Malicious code in siska-tiwul63-kuki (npm)
- Aug 14, 2025
Malicious code in siska-lapis27-breki (npm)
- Aug 14, 2025
Malicious code in siska-kue81-breki (npm)
- Aug 14, 2025
Malicious code in sirius-ophiuchus-publish-interferometry (npm)
- Aug 14, 2025
Malicious code in sirius-mensa-publish-redshift (npm)
- Aug 14, 2025
Malicious code in sirius-kuiperbelt-dendrochronology-nestjs (npm)
- Aug 14, 2025
Malicious code in sirius-dione-sqlite-docusaurus (npm)
- Aug 14, 2025
Malicious code in sirius-apollo-publish-epigenetics (npm)
- Aug 14, 2025
Malicious code in sirinova (npm)
- Aug 14, 2025
Malicious code in sirichat (npm)
- Aug 14, 2025
Malicious code in sircon (npm)
- Aug 14, 2025
Malicious code in siphwkdaxfmneour (npm)
- Aug 14, 2025
Malicious code in siovgqtdkpfrabcl (npm)
- Aug 14, 2025
Malicious code in sinucvatmxzywejg (npm)
- Aug 14, 2025
Malicious code in sinta-saguer18-kuki (npm)
- Aug 14, 2025
Malicious code in sinta-nasipecel29-sukiwir (npm)
- Aug 14, 2025
Malicious code in sinta-lapis60-breki (npm)
- Aug 14, 2025
Malicious code in sinta-dradag6-sukiwir (npm)
- Aug 14, 2025
Malicious code in sinta-donat92-breki (npm)
- Aug 14, 2025
Malicious code in sinta-bubursumsum38-kuki (npm)
- Aug 14, 2025
Malicious code in sinta-asinan78-breki (npm)
- Aug 14, 2025
Malicious code in singularity-ultra-style-loader-ionosphere (npm)
- Aug 14, 2025
Malicious code in singularity-paleontology-nebula-hugo (npm)
- Aug 14, 2025
Malicious code in singularity-mesosphere-io-remark (npm)
- Aug 14, 2025
Malicious code in singularity-baryon-wezen-hydra (npm)
- Aug 14, 2025
Malicious code in singularitarianism-selenium-adonis-webpack (npm)
- Aug 14, 2025
Malicious code in singularitarianism-puppeteer-ganymede-hexo (npm)
- Aug 14, 2025
Malicious code in singularitarianism-nebula-epigenetics-dagda (npm)
- Aug 14, 2025
Malicious code in singularitarianism-eleventy-gridsome-lint-staged (npm)
- Aug 14, 2025
Malicious code in singularitarianism-cybernetics-geckodriver-accretion (npm)
- Aug 14, 2025
Malicious code in single-card-tarot (npm)
- Aug 14, 2025
Malicious code in sindra (npm)
- Aug 14, 2025
Malicious code in sinatbbs (npm)
- Aug 14, 2025
Malicious code in simulate-omicron-async-socket-simple (npm)
- Aug 14, 2025
Malicious code in simskoy (npm)
- Aug 14, 2025
Malicious code in simpyple (npm)
- Aug 14, 2025
Malicious code in simplifydigital-generator-webcomponent (npm)
- Aug 14, 2025
Malicious code in simpletop (npm)
- Aug 14, 2025
Malicious code in simpleepg (npm)
- Aug 14, 2025
Malicious code in simple.io (npm)
- Aug 14, 2025
Malicious code in simple-zero-shell-zeta-decompress (npm)
- Aug 14, 2025
Malicious code in simple-stub-tree-nu-authenticate (npm)
Page 5356 of 6,665