Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in simple-runtime-theta-code-sed (npm)
- Aug 14, 2025
Malicious code in simple-report-parse-new-object (npm)
- Aug 14, 2025
Malicious code in simple-month-calendar (npm)
- Aug 14, 2025
Malicious code in simple-js-shake-256 (npm)
- Aug 14, 2025
Malicious code in simple-js-shake-128 (npm)
- Aug 14, 2025
Malicious code in simple-js-shake (npm)
- Aug 14, 2025
Malicious code in simple-js-sha3-512 (npm)
- Aug 14, 2025
Malicious code in simple-js-sha3-384 (npm)
- Aug 14, 2025
Malicious code in simple-js-sha3-256 (npm)
- Aug 14, 2025
Malicious code in simple-js-sha3-224 (npm)
- Aug 14, 2025
Malicious code in simple-js-sha3 (npm)
- Aug 14, 2025
Malicious code in simple-console-logger-20231399-hyunmin (npm)
- Aug 14, 2025
Malicious code in simple-await-zero-pi-async (npm)
- Aug 14, 2025
Malicious code in simple-api-key-validation (npm)
- Aug 14, 2025
Malicious code in simpic (npm)
- Aug 14, 2025
Malicious code in simofrus (npm)
- Aug 14, 2025
Malicious code in similix-win32-x64-msvc (npm)
- Aug 14, 2025
Malicious code in similator (npm)
- Aug 14, 2025
Malicious code in simgenome (npm)
- Aug 14, 2025
Malicious code in simbers (npm)
- Aug 14, 2025
Malicious code in sim-packages (npm)
- Aug 14, 2025
Malicious code in silocom (npm)
- Aug 14, 2025
Malicious code in silk-wadic-70udd-amber-project (npm)
- Aug 14, 2025
Malicious code in silk-sdgpe-aed8o-throne-project (npm)
- Aug 14, 2025
Malicious code in silk-r3uxk-e3mgb-harp-project (npm)
- Aug 14, 2025
Malicious code in silk-gzcn7-rkz5v-dune-project (npm)
- Aug 14, 2025
Malicious code in silk-aeao9-dbq0a-jade-project (npm)
- Aug 14, 2025
Malicious code in silk-99qyb-eei8t-neptune-project (npm)
- Aug 14, 2025
Malicious code in silk-8pq5l-d0dum-plume-project (npm)
- Aug 14, 2025
Malicious code in silk-21cwn-ep923-tranquil-project (npm)
- Aug 14, 2025
Malicious code in silk-0xjlc-av1f1-meadow-project (npm)
- Aug 14, 2025
Malicious code in silence-lull-ley355-project (npm)
- Aug 14, 2025
Malicious code in sigviaa (npm)
- Aug 14, 2025
Malicious code in signsaver (npm)
- Aug 14, 2025
Malicious code in signpost-verifier (npm)
- Aug 14, 2025
Malicious code in signpost-signer (npm)
- Aug 14, 2025
Malicious code in signpost-rails (npm)
- Aug 14, 2025
Malicious code in signon-react-data-grid (npm)
- Aug 14, 2025
Malicious code in signmix (npm)
- Aug 14, 2025
Malicious code in signinrpi (npm)
- Aug 14, 2025
Malicious code in signetedurlserver (npm)
- Aug 14, 2025
Malicious code in signalstr (npm)
- Aug 14, 2025
Malicious code in signal-slow-reject-easy-object (npm)
- Aug 14, 2025
Malicious code in sigma-scale-fire-dog-decode (npm)
- Aug 14, 2025
Malicious code in sigma-reject-mock-try-simulate (npm)
- Aug 14, 2025
Malicious code in sightly-parser (npm)
- Aug 14, 2025
Malicious code in sighten-apollo (npm)
- Aug 14, 2025
Malicious code in sigcot (npm)
- Aug 14, 2025
Malicious code in sigaxmind (npm)
- Aug 14, 2025
Malicious code in sierra-zpn-project (npm)
Page 5357 of 6,665