Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,230 total in npm · sorted newest first- Aug 14, 2025
Malicious code in seismology-unuk-google-eleventy (npm)
- Aug 14, 2025
Malicious code in seif (npm)
- Aug 14, 2025
Malicious code in segpub (npm)
- Aug 14, 2025
Malicious code in segmentread-paypal (npm)
- Aug 14, 2025
Malicious code in segmentlifecycle-paypal (npm)
- Aug 14, 2025
Malicious code in segment-platform-functional-test (npm)
- Aug 14, 2025
Malicious code in seeren (npm)
- Aug 14, 2025
Malicious code in seer-js (npm)
- Aug 14, 2025
Malicious code in seemver (npm)
- Aug 14, 2025
Malicious code in seedling-viz-angular-wp2 (npm)
- Aug 14, 2025
Malicious code in sedona-angular-widget-launcher (npm)
- Aug 14, 2025
Malicious code in sedona-angular-gulp-tasks (npm)
- Aug 14, 2025
Malicious code in sedna-redshift-farout-umbriel (npm)
- Aug 14, 2025
Malicious code in sedna-proteomics-yaml-mantle (npm)
- Aug 14, 2025
Malicious code in sedna-helios-apex-antares (npm)
- Aug 14, 2025
Malicious code in sedna-dactyl-polaris-loglevel (npm)
- Aug 14, 2025
Malicious code in sedna-child-process-jasmine-impulse (npm)
- Aug 14, 2025
Malicious code in sedna-capella-paleoceanography-global (npm)
- Aug 14, 2025
Malicious code in sedinta (npm)
- Aug 14, 2025
Malicious code in sedimentology-xo-puppeteer-warp (npm)
- Aug 14, 2025
Malicious code in sedimentology-webdriver-manager-spectroscopy-writable (npm)
- Aug 14, 2025
Malicious code in sedimentology-mdx-rigel-planetology (npm)
- Aug 14, 2025
Malicious code in sedimentology-fork-gravitationalwave-eclipse (npm)
- Aug 14, 2025
Malicious code in sedimentology-ariel-mutation-geodynamo (npm)
- Aug 14, 2025
Malicious code in sedangky (npm)
- Aug 14, 2025
Malicious code in sed-simple-sandbox-reject-zero (npm)
- Aug 14, 2025
Malicious code in sed-new-protected-signal-small (npm)
- Aug 14, 2025
Malicious code in sed-good-finally-tree-xi (npm)
- Aug 14, 2025
Malicious code in sed-deploy-shell-cat-grid (npm)
- Aug 14, 2025
Malicious code in securitydb (npm)
- Aug 14, 2025
Malicious code in securitycontext-paypal (npm)
- Aug 14, 2025
Malicious code in security_reports (npm)
- Aug 14, 2025
Malicious code in security.txt (npm)
- Aug 14, 2025
Malicious code in securicrypt-api (npm)
- Aug 14, 2025
Malicious code in securiace (npm)
- Aug 14, 2025
Malicious code in secure_identity_login_module (npm)
- Aug 14, 2025
Malicious code in secure-sandbox-validate-public-reject (npm)
- Aug 14, 2025
Malicious code in secure-docs-app (npm)
- Aug 14, 2025
Malicious code in secure-daemon-bash-code-array (npm)
- Aug 14, 2025
Malicious code in secret_utility (npm)
- Aug 14, 2025
Malicious code in secden (npm)
- Aug 14, 2025
Malicious code in secbook-1to9 (npm)
- Aug 14, 2025
Malicious code in sec-learning (npm)
- Aug 14, 2025
Malicious code in sebrae (npm)
- Aug 14, 2025
Malicious code in seawall (npm)
- Aug 14, 2025
Malicious code in seaview (npm)
- Aug 14, 2025
Malicious code in searchend (npm)
- Aug 14, 2025
Malicious code in search_test_framework (npm)
- Aug 14, 2025
Malicious code in search-npm-blocking-manager (npm)
- Aug 14, 2025
Malicious code in search-fe (npm)
Page 5364 of 6,665