Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,230 total in npm · sorted newest first- Aug 14, 2025
Malicious code in scrape-eksi (npm)
- Aug 14, 2025
Malicious code in scpbook (npm)
- Aug 14, 2025
Malicious code in scoutmgr (npm)
- Aug 14, 2025
Malicious code in scotarot (npm)
- Aug 14, 2025
Malicious code in scorpius-kronos-proxima-eslint (npm)
- Aug 14, 2025
Malicious code in scorpius-gulp-cors-kinetic (npm)
- Aug 14, 2025
Malicious code in score_and_match (npm)
- Aug 14, 2025
Malicious code in scope-gatsby (npm)
- Aug 14, 2025
Malicious code in scootertutor-api (npm)
- Aug 14, 2025
Malicious code in scnmap (npm)
- Aug 14, 2025
Malicious code in scn-login (npm)
- Aug 14, 2025
Malicious code in scmlimitationlfcylserv (npm)
- Aug 14, 2025
Malicious code in scmlimitationdataserv (npm)
- Aug 14, 2025
Malicious code in scmlimitationaccesserv (npm)
- Aug 14, 2025
Malicious code in scm-ui-widgets (npm)
- Aug 14, 2025
Malicious code in sclassy (npm)
- Aug 14, 2025
Malicious code in sclara (npm)
- Aug 14, 2025
Malicious code in scketch (npm)
- Aug 14, 2025
Malicious code in scizim (npm)
- Aug 14, 2025
Malicious code in scimr (npm)
- Aug 14, 2025
Malicious code in scim (npm)
- Aug 14, 2025
Malicious code in scilver (npm)
- Aug 14, 2025
Malicious code in schoolgis (npm)
- Aug 14, 2025
Malicious code in schoolbag (npm)
- Aug 14, 2025
Malicious code in schnapuni (npm)
- Aug 14, 2025
Malicious code in schlupps (npm)
- Aug 14, 2025
Malicious code in schkbooks (npm)
- Aug 14, 2025
Malicious code in schibsted-strongbox (npm)
- Aug 14, 2025
Malicious code in schibsted-payment-sdk (npm)
- Aug 14, 2025
Malicious code in schibsted-identity-sdk (npm)
- Aug 14, 2025
Malicious code in schibsted-core-sdk-node (npm)
- Aug 14, 2025
Malicious code in schibsted-browser-sdk (npm)
- Aug 14, 2025
Malicious code in schere (npm)
- Aug 14, 2025
Malicious code in scheddy (npm)
- Aug 14, 2025
Malicious code in schannel (npm)
- Aug 14, 2025
Malicious code in scentek (npm)
- Aug 14, 2025
Malicious code in scdevs (npm)
- Aug 14, 2025
Malicious code in scantig (npm)
- Aug 14, 2025
Malicious code in scanjobs (npm)
- Aug 14, 2025
Malicious code in scandisk (npm)
- Aug 14, 2025
Malicious code in scanble (npm)
- Aug 14, 2025
Malicious code in scaling-palm-tree (npm)
- Aug 14, 2025
Malicious code in scaleapi-callback (npm)
- Aug 14, 2025
Malicious code in scaleable (npm)
- Aug 14, 2025
Malicious code in scale-route-bash-lambda-class (npm)
- Aug 14, 2025
Malicious code in scale-execute-error-balance-try (npm)
- Aug 14, 2025
Malicious code in scale-cache-resolve-file-wind (npm)
- Aug 14, 2025
Malicious code in scalawork (npm)
- Aug 14, 2025
Malicious code in scalaris (npm)
- Aug 14, 2025
Malicious code in scalamooc (npm)
Page 5366 of 6,665