Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,230 total in npm · sorted newest first- Aug 14, 2025
Malicious code in sealord (npm)
- Aug 14, 2025
Malicious code in seajax (npm)
- Aug 14, 2025
Malicious code in seaborn-doc-zh (npm)
- Aug 14, 2025
Malicious code in se42 (npm)
- Aug 14, 2025
Malicious code in sdsdadasdsaxs (npm)
- Aug 14, 2025
Malicious code in sdpuicopy (npm)
- Aug 14, 2025
Malicious code in sdm630-modbus-tcp (npm)
- Aug 14, 2025
Malicious code in sdk-workshop (npm)
- Aug 14, 2025
Malicious code in sdjournal (npm)
- Aug 14, 2025
Malicious code in sdhajgdw (npm)
- Aug 14, 2025
Malicious code in sdhajgdaj (npm)
- Aug 14, 2025
Malicious code in sdfsfewetw1 (npm)
- Aug 14, 2025
Malicious code in sdfjghlkfjdshlkjdhsfg (npm)
- Aug 14, 2025
Malicious code in sderhmxgjyzakqbk (npm)
- Aug 14, 2025
Malicious code in sdc-dynamic-tile (npm)
- Aug 14, 2025
Malicious code in sdadwjhxz (npm)
- Aug 14, 2025
Malicious code in scwtest (npm)
- Aug 14, 2025
Malicious code in scv-external-telephony-sfdx-app (npm)
- Aug 14, 2025
Malicious code in scutshots (npm)
- Aug 14, 2025
Malicious code in scuntestpk (npm)
- Aug 14, 2025
Malicious code in scully (npm)
- Aug 14, 2025
Malicious code in scrupload (npm)
- Aug 14, 2025
Malicious code in scrumwise (npm)
- Aug 14, 2025
Malicious code in scrumple-windows-64 (npm)
- Aug 14, 2025
Malicious code in scrumple-linux-64 (npm)
- Aug 14, 2025
Malicious code in scrollviewer (npm)
- Aug 14, 2025
Malicious code in scrm.js (npm)
- Aug 14, 2025
Malicious code in scriptsx (npm)
- Aug 14, 2025
Malicious code in scriptssh (npm)
- Aug 14, 2025
Malicious code in scripts-quantum-postcss-loader-umbriel (npm)
- Aug 14, 2025
Malicious code in scripts-checkout-apis-temp (npm)
- Aug 14, 2025
Malicious code in scripts-astrobiology-testcafe-cluster (npm)
- Aug 14, 2025
Malicious code in scriptftb (npm)
- Aug 14, 2025
Malicious code in scribnrjs (npm)
- Aug 14, 2025
Malicious code in scribd-petunia (npm)
- Aug 14, 2025
Malicious code in screwdriver-plugin-users (npm)
- Aug 14, 2025
Malicious code in screwdriver-plugin-platforms (npm)
- Aug 14, 2025
Malicious code in screwdriver-plugin-pipelines (npm)
- Aug 14, 2025
Malicious code in screwdriver-plugin-login (npm)
- Aug 14, 2025
Malicious code in screwdriver-plugin-jobs (npm)
- Aug 14, 2025
Malicious code in screwdriver-plugin-builds (npm)
- Aug 14, 2025
Malicious code in screwdriver-data-model (npm)
- Aug 14, 2025
Malicious code in screepsmod-client (npm)
- Aug 14, 2025
Malicious code in screenly (npm)
- Aug 14, 2025
Malicious code in scratzpad (npm)
- Aug 14, 2025
Malicious code in scrapy-doc-zh (npm)
- Aug 14, 2025
Malicious code in scraptalk (npm)
- Aug 14, 2025
Malicious code in scrapsite (npm)
- Aug 14, 2025
Malicious code in scrappit (npm)
- Aug 14, 2025
Malicious code in scraping-eksi (npm)
Page 5365 of 6,665