Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in shujuku-xutong-quanshu (npm)
- Aug 14, 2025
Malicious code in shujuku-xitong-shujuku-yushuju-cangku-daolun (npm)
- Aug 14, 2025
Malicious code in shujuku-xitong-shixian (npm)
- Aug 14, 2025
Malicious code in shujuku-xitong-sheji-shixian-yuguanli-jichupian (npm)
- Aug 14, 2025
Malicious code in shujuku-xitong-jichu-jiaocheng (npm)
- Aug 14, 2025
Malicious code in shujuku-xitong-gainian (npm)
- Aug 14, 2025
Malicious code in shujuku-xitong-daolun (npm)
- Aug 14, 2025
Malicious code in shueoiwsi (npm)
- Aug 14, 2025
Malicious code in shstuff (npm)
- Aug 14, 2025
Malicious code in shruthihm (npm)
- Aug 14, 2025
Malicious code in shrugging-logging (npm)
- Aug 14, 2025
Malicious code in showview (npm)
- Aug 14, 2025
Malicious code in showsync (npm)
- Aug 14, 2025
Malicious code in showhaus (npm)
- Aug 14, 2025
Malicious code in show-version (npm)
- Aug 14, 2025
Malicious code in show-help (npm)
- Aug 14, 2025
Malicious code in shoveldev (npm)
- Aug 14, 2025
Malicious code in shortpub (npm)
- Aug 14, 2025
Malicious code in shortefy (npm)
- Aug 14, 2025
Malicious code in short-root-error-encrypt-boolean (npm)
- Aug 14, 2025
Malicious code in short-decrypt-mock-awk-function (npm)
- Aug 14, 2025
Malicious code in shopriver (npm)
- Aug 14, 2025
Malicious code in shopit (npm)
- Aug 14, 2025
Malicious code in shopify_transporter (npm)
- Aug 14, 2025
Malicious code in shopify_theme (npm)
- Aug 14, 2025
Malicious code in shopify_security_base (npm)
- Aug 14, 2025
Malicious code in shopify_panama (npm)
- Aug 14, 2025
Malicious code in shopify_minitest_reporters (npm)
- Aug 14, 2025
Malicious code in shopify_metrics (npm)
- Aug 14, 2025
Malicious code in shopify_lhm (npm)
- Aug 14, 2025
Malicious code in shopify_function (npm)
- Aug 14, 2025
Malicious code in shopify_fthrottle (npm)
- Aug 14, 2025
Malicious code in shopify_flow_app (npm)
- Aug 14, 2025
Malicious code in shopify_app_platform (npm)
- Aug 14, 2025
Malicious code in shopify_api_console (npm)
- Aug 14, 2025
Malicious code in shopify-translation_platform (npm)
- Aug 14, 2025
Malicious code in shopify-tracing (npm)
- Aug 14, 2025
Malicious code in shopify-throttle (npm)
- Aug 14, 2025
Malicious code in shopify-testing-cops (npm)
- Aug 14, 2025
Malicious code in shopify-secrets (npm)
- Aug 14, 2025
Malicious code in shopify-rails (npm)
- Aug 14, 2025
Malicious code in shopify-proctor (npm)
- Aug 14, 2025
Malicious code in shopify-ping (npm)
- Aug 14, 2025
Malicious code in shopify-payments-terms (npm)
- Aug 14, 2025
Malicious code in shopify-payments-configuration (npm)
- Aug 14, 2025
Malicious code in shopify-opensrs (npm)
- Aug 14, 2025
Malicious code in shopify-money (npm)
- Aug 14, 2025
Malicious code in shopify-lita-slack (npm)
- Aug 14, 2025
Malicious code in shopify-junos-ez-stdlib (npm)
- Aug 14, 2025
Malicious code in shopify-i18n (npm)
Page 5359 of 6,665