Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,230 total in npm · sorted newest first- Aug 14, 2025
Malicious code in sequoia-kiwi-mqz132-project (npm)
- Aug 14, 2025
Malicious code in sequoia-jade-ywa622-project (npm)
- Aug 14, 2025
Malicious code in sequoia-icicle-wvr438-project (npm)
- Aug 14, 2025
Malicious code in sequoia-glacier-vvq207-project (npm)
- Aug 14, 2025
Malicious code in sequoia-fern-rmb064-project (npm)
- Aug 14, 2025
Malicious code in sequer (npm)
- Aug 14, 2025
Malicious code in sequelize-schema-file-generator (npm)
- Aug 14, 2025
Malicious code in sequelize-models-version-history (npm)
- Aug 14, 2025
Malicious code in sepbaue1 (npm)
- Aug 14, 2025
Malicious code in seotools (npm)
- Aug 14, 2025
Malicious code in seonatmunsetmaouseomauntsmeoatnumeontkmnteumntemoiaoisntmoeunitmoeantum (npm)
- Aug 14, 2025
Malicious code in sentry-sdk-browser-extension (npm)
- Aug 14, 2025
Malicious code in sentimnet (npm)
- Aug 14, 2025
Malicious code in sensugaz (npm)
- Aug 14, 2025
Malicious code in sensoplex (npm)
- Aug 14, 2025
Malicious code in senku-tea (npm)
- Aug 14, 2025
Malicious code in senginx (npm)
- Aug 14, 2025
Malicious code in senecacli (npm)
- Aug 14, 2025
Malicious code in sendgst (npm)
- Aug 14, 2025
Malicious code in send-alimail (npm)
- Aug 14, 2025
Malicious code in senchads (npm)
- Aug 14, 2025
Malicious code in semtypes (npm)
- Aug 14, 2025
Malicious code in semlinker (npm)
- Aug 14, 2025
Malicious code in semio-lever-model (npm)
- Aug 14, 2025
Malicious code in seminarc (npm)
- Aug 14, 2025
Malicious code in semideus (npm)
- Aug 14, 2025
Malicious code in semian (npm)
- Aug 14, 2025
Malicious code in semdroid (npm)
- Aug 14, 2025
Malicious code in semathrottle (npm)
- Aug 14, 2025
Malicious code in semantic-ui-restart-solarnebula-borealis (npm)
- Aug 14, 2025
Malicious code in semantic-ui-radiometric-tectonophysics-ethology (npm)
- Aug 14, 2025
Malicious code in semantic-ui-pm2-upgrade-hugo (npm)
- Aug 14, 2025
Malicious code in semantic-ui-perturbation-oortcloud-draco (npm)
- Aug 14, 2025
Malicious code in semantic-ui-nestjs-ionosphere-terser-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in semantic-ui-mongodb-proxima-lynx (npm)
- Aug 14, 2025
Malicious code in semantic-release-futurology-development-canopus (npm)
- Aug 14, 2025
Malicious code in semantic-release-atlas-google-kaus (npm)
- Aug 14, 2025
Malicious code in semanaibm (npm)
- Aug 14, 2025
Malicious code in sema-ui-components (npm)
- Aug 14, 2025
Malicious code in selper (npm)
- Aug 14, 2025
Malicious code in sellerhub-fe-featureflags (npm)
- Aug 14, 2025
Malicious code in selfpinger (npm)
- Aug 14, 2025
Malicious code in SelfieJS (npm)
- Aug 14, 2025
Malicious code in selfiehd (npm)
- Aug 14, 2025
Malicious code in self-require-trap (npm)
- Aug 14, 2025
Malicious code in selenium-exobiology-archaeogenetics-backend (npm)
- Aug 14, 2025
Malicious code in selenipy (npm)
- Aug 14, 2025
Malicious code in selektion (npm)
- Aug 14, 2025
Malicious code in selbstvorstellung (npm)
- Aug 14, 2025
Malicious code in selbans (npm)
Page 5363 of 6,665