Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,266 total in npm · sorted newest first- Jun 25, 2024
Malicious code in seriously-simple-podcasting (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sequelize-orm (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sendbernar (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in sellsy-kering-app (npm)
1 compromised version
- Jun 25, 2024
Malicious code in self-service-sigma-account (npm)
1 compromised version
- Jun 25, 2024
Malicious code in self-service-flex (npm)
1 compromised version
- Jun 25, 2024
Malicious code in security-malware-firewall (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in sdg-indicators-usa (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in scss-combine (npm)
1 compromised version
- Jun 25, 2024
Malicious code in scroll-up-bar (npm)
1 compromised version
- Jun 25, 2024
Malicious code in scream-vi-2023 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in scream-6-2023-online-on-fullmovies-free-at-homes4ks (npm)
1 compromised version
- Jun 25, 2024
Malicious code in scenepic (npm)
1 compromised version
- Jun 25, 2024
Malicious code in scan4all (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in sber-sberx-prime (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sarkar-koja (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sapling-output-plugin (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in sap.ui.layout (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sap-iot-sdk (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in rxxxxjs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in rush-command-parameters-plugin (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ruamel.yaml.clib (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ruamel-yaml-clib (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ruamel-yaml (npm)
1 compromised version
- Jun 25, 2024
Malicious code in route-converter (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in rootkidsholonote (npm)
1 compromised version
- Jun 25, 2024
Malicious code in rocketmq-site (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in robotodraft (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ro-executer (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in rn-addons (npm)
1 compromised version
- Jun 25, 2024
Malicious code in rippling-flux-sdk (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in rippling-flux-dev-tools (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in rippling-flux-dev (npm)
1 compromised version
- Jun 25, 2024
Malicious code in resume-preview-component (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in reset-api-success (npm)
1 compromised version
- Jun 25, 2024
Malicious code in report_name (npm)
1 compromised version
- Jun 25, 2024
Malicious code in repelis-pelisplus-ver-la-ballena-2022-pelicula-completa-en-espanol (npm)
1 compromised version
- Jun 25, 2024
Malicious code in remove-pr-labels (npm)
1 compromised version
- Jun 25, 2024
Malicious code in remove-docker-tag (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in relay-website (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in relay-github-root (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in relativity123rf (npm)
1 compromised version
- Jun 25, 2024
Malicious code in register-uitspraken (npm)
1 compromised version
- Jun 25, 2024
Malicious code in regily (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ref-indexer (npm)
1 compromised version
- Jun 25, 2024
Malicious code in redis-v4 (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in recurly-integrations (npm)
1 compromised version
- Jun 25, 2024
Malicious code in recovery-center-web-sdk (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in recommendations-fe (npm)
1 compromised version
- Jun 25, 2024
Malicious code in realtimeboard (npm)
2 compromised versions
Page 6181 of 6,646