Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,214 total in npm · sorted newest first- Aug 14, 2025
Malicious code in sasafras (npm)
- Aug 14, 2025
Malicious code in sarrdril712 (npm)
- Aug 14, 2025
Malicious code in sarodi (npm)
- Aug 14, 2025
Malicious code in sari-lapis55-sukiwir (npm)
- Aug 14, 2025
Malicious code in sari-kue66-sukiwir (npm)
- Aug 14, 2025
Malicious code in sari-keraktelor71-breki (npm)
- Aug 14, 2025
Malicious code in sari-brongkos12-breki (npm)
- Aug 14, 2025
Malicious code in sapphire_qrbgu_ldfaq_labyrinth (npm)
- Aug 14, 2025
Malicious code in sapphire_bumr2_09stb_topaz (npm)
- Aug 14, 2025
Malicious code in sapphire_4y2ip_58ue8_paradise (npm)
- Aug 14, 2025
Malicious code in sapphire-vista-quv245-project (npm)
- Aug 14, 2025
Malicious code in sapphire-ripple-yhd286-project (npm)
- Aug 14, 2025
Malicious code in sapphire-meadow-hsm302-project (npm)
- Aug 14, 2025
Malicious code in sapphire-jade-mmr221-project (npm)
- Aug 14, 2025
Malicious code in sapphire-falcon-ono751-project (npm)
- Aug 14, 2025
Malicious code in sapphire-emerald-fky380-project (npm)
- Aug 14, 2025
Malicious code in sapphire-ant-ues229-project (npm)
- Aug 14, 2025
Malicious code in sapienlab (npm)
- Aug 14, 2025
Malicious code in sapience (npm)
- Aug 14, 2025
Malicious code in sap-node-rfc-utils (npm)
- Aug 14, 2025
Malicious code in sao-mylib (npm)
- Aug 14, 2025
Malicious code in santoro (npm)
- Aug 14, 2025
Malicious code in santillan (npm)
- Aug 14, 2025
Malicious code in sanityweb (npm)
- Aug 14, 2025
Malicious code in sanitize-runtime-test-dog-user (npm)
- Aug 14, 2025
Malicious code in sanitize-object-pipe-class-grid (npm)
- Aug 14, 2025
Malicious code in sanitize-interpret-zero-emulate-container (npm)
- Aug 14, 2025
Malicious code in sanitize-encode-interpret-sigma-water (npm)
- Aug 14, 2025
Malicious code in sanitize-easy-sigma-user-execute (npm)
- Aug 14, 2025
Malicious code in sanecss (npm)
- Aug 14, 2025
Malicious code in sandzuro (npm)
- Aug 14, 2025
Malicious code in sandcage (npm)
- Aug 14, 2025
Malicious code in sandbox-thread-easy-char-chi (npm)
- Aug 14, 2025
Malicious code in sandbox-report-cat-orchestrate-orchestrate (npm)
- Aug 14, 2025
Malicious code in sandbox-encode-string-view-good (npm)
- Aug 14, 2025
Malicious code in sanctuary_kcns8_kw2vs_zephyr (npm)
- Aug 14, 2025
Malicious code in sanctuary_imvvv_em5b2_arcade (npm)
- Aug 14, 2025
Malicious code in sanctuary_gt3sa_tifk2_iris (npm)
- Aug 14, 2025
Malicious code in sanctuary_105wz_vuqhg_maple (npm)
- Aug 14, 2025
Malicious code in sancoapp (npm)
- Aug 14, 2025
Malicious code in sanaviron (npm)
- Aug 14, 2025
Malicious code in sanaris (npm)
- Aug 14, 2025
Malicious code in samsungsimulator (npm)
- Aug 14, 2025
Malicious code in samsung (npm)
- Aug 14, 2025
Malicious code in sampless (npm)
- Aug 14, 2025
Malicious code in samplehub (npm)
- Aug 14, 2025
Malicious code in samokup (npm)
- Aug 14, 2025
Malicious code in samlsso (npm)
- Aug 14, 2025
Malicious code in samcodes (npm)
- Aug 14, 2025
Malicious code in samassi (npm)
Page 5368 of 6,665