Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,230 total in npm · sorted newest first- Aug 14, 2025
Malicious code in session-jmodule (npm)
- Aug 14, 2025
Malicious code in servicestack (npm)
- Aug 14, 2025
Malicious code in servicescore (npm)
- Aug 14, 2025
Malicious code in service-stack (npm)
- Aug 14, 2025
Malicious code in service-edge (npm)
- Aug 14, 2025
Malicious code in service-content-consumers (npm)
- Aug 14, 2025
Malicious code in serverless-slack-app (npm)
- Aug 14, 2025
Malicious code in serverless-router (npm)
- Aug 14, 2025
Malicious code in serverless-plugin-rds-trigger (npm)
- Aug 14, 2025
Malicious code in server-superposition-grus-asthenosphere (npm)
- Aug 14, 2025
Malicious code in server-push-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in server-mini-css-extract-plugin-orogeny-spawn (npm)
- Aug 14, 2025
Malicious code in server-kastra-paleoceanography-fornax (npm)
- Aug 14, 2025
Malicious code in server-for-testing (npm)
- Aug 14, 2025
Malicious code in server-cybernetics-spinner-init (npm)
- Aug 14, 2025
Malicious code in serswef3 (npm)
- Aug 14, 2025
Malicious code in serraview.common.styles (npm)
- Aug 14, 2025
Malicious code in serqet (npm)
- Aug 14, 2025
Malicious code in serilize (npm)
- Aug 14, 2025
Malicious code in serien (npm)
- Aug 14, 2025
Malicious code in serialport-galileo-test (npm)
- Aug 14, 2025
Malicious code in serializes (npm)
- Aug 14, 2025
Malicious code in serialize-sudo-delta-sandbox-decode (npm)
- Aug 14, 2025
Malicious code in serialize-stub-secure-protected-psi (npm)
- Aug 14, 2025
Malicious code in serialize-module-wind-cache-execute (npm)
- Aug 14, 2025
Malicious code in seriales (npm)
- Aug 14, 2025
Malicious code in serenity-mxxul-weor6-knoll-project (npm)
- Aug 14, 2025
Malicious code in serenity-faz39-hvnww-ivy-project (npm)
- Aug 14, 2025
Malicious code in serenade_vtn2m_wk3n2_cascade (npm)
- Aug 14, 2025
Malicious code in serenade_sixkt_9y3u2_mirage (npm)
- Aug 14, 2025
Malicious code in serenade_oez8j_9u6af_nimbus (npm)
- Aug 14, 2025
Malicious code in serenade_maykq_jaho3_glacier (npm)
- Aug 14, 2025
Malicious code in serenade_hdv31_vj5fk_nymph (npm)
- Aug 14, 2025
Malicious code in serenade_aq47m_s5gyz_lake (npm)
- Aug 14, 2025
Malicious code in serenade_amb74_8ludv_ember (npm)
- Aug 14, 2025
Malicious code in serenade_7umzp_dfa16_quasar (npm)
- Aug 14, 2025
Malicious code in serenade_5ti9p_yiirq_molecule (npm)
- Aug 14, 2025
Malicious code in serenade_42srj_fdzrz_nimbus (npm)
- Aug 14, 2025
Malicious code in serenade_114yf_kmug5_vantage (npm)
- Aug 14, 2025
Malicious code in serenade-yonder-eop915-project (npm)
- Aug 14, 2025
Malicious code in seraque (npm)
- Aug 14, 2025
Malicious code in ser3q (npm)
- Aug 14, 2025
Malicious code in sequoia-zenith-utz354-project (npm)
- Aug 14, 2025
Malicious code in sequoia-zebra-nef375-project (npm)
- Aug 14, 2025
Malicious code in sequoia-zebra-mkq721-project (npm)
- Aug 14, 2025
Malicious code in sequoia-yard-pnq138-project (npm)
- Aug 14, 2025
Malicious code in sequoia-waterfall-mch666-project (npm)
- Aug 14, 2025
Malicious code in sequoia-thistle-xon839-project (npm)
- Aug 14, 2025
Malicious code in sequoia-pinnacle-ykf708-project (npm)
- Aug 14, 2025
Malicious code in sequoia-nautilus-qud295-project (npm)
Page 5362 of 6,665