Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Oct 16, 2024
Malicious code in square-red-puffin (npm)
1 compromised version
- Oct 16, 2024
Malicious code in spontaneous-plum-albatross (npm)
1 compromised version
- Oct 16, 2024
Malicious code in spiritual-magenta-cobra (npm)
1 compromised version
- Oct 16, 2024
Malicious code in spectrum-css-monorepo (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in soc-react-ui (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snp-react-scripts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snp-react-scipts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snp-design-system-charts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-sctipts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scrpits (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scritps (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scripst (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scrips (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scipts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-design-systm-charts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-design-system-chrts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-design-system-charst (npm)
1 compromised version
- Oct 16, 2024
Malicious code in slateor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in simple-app-subdir (npm)
1 compromised version
- Oct 16, 2024
Malicious code in silent-plum-tuna (npm)
1 compromised version
- Oct 16, 2024
Malicious code in siilobv (npm)
1 compromised version
- Oct 16, 2024
Malicious code in signature-v4-multi-region (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sharp-linux-x64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sharp-libvips-linux-x64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in shardlier (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sfly-mobile-cart (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sethroght (npm)
1 compromised version
- Oct 16, 2024
Malicious code in semantic-red-elephant (npm)
1 compromised version
- Oct 16, 2024
Malicious code in semantic-orange-shrew (npm)
1 compromised version
- Oct 16, 2024
Malicious code in selfish-blush-newt (npm)
1 compromised version
- Oct 16, 2024
Malicious code in selected-lavender-asp (npm)
1 compromised version
- Oct 16, 2024
Malicious code in seismic2022 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in securedrop (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in secret-orange-junglefowl (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sec-dep-demo (npm)
1 compromised version
- Oct 16, 2024
Malicious code in searchwp-live-ajax-search (npm)
1 compromised version
- Oct 16, 2024
Malicious code in scm-design-system (npm)
1 compromised version
- Oct 16, 2024
Malicious code in scc-quack (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sc-qucak (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sc-quakq (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sc-quakc (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sc-quac (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sbhduoe (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sb_directbanking_ui (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap_account (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-ageverify (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-adminname (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-adminmail (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-adminid (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-adminemail (npm)
1 compromised version
Page 6075 of 6,646