Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 11, 2024
Malicious code in sap-answer (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-anonymous (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-aoe (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-apage (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-anon (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-anchor (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-and (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-all (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-always (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-albumid (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-allblogs (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-akey (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-allusers (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-amount (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-alt (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-alpha (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-allrows (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-alias (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-album (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-allday (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-alert (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-align (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-ajxaction (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-agreement (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-agree (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-aid (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-aim (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-agreed (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-ajaxrequest (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-ajax (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-agent (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-agb (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-again (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-adminpassword (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-adminpwd (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-afilter (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-advanced (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-adress (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-adv (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-adminpass (npm)
1 compromised version
- Jul 11, 2024
Malicious code in @abdallaeg/sap_access (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-address (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-address2 (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-addr (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-address1 (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap_addusers (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-addon (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-addnew (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-addcomment (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-addauthitemform (npm)
1 compromised version
Page 6143 of 6,646