Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,073 total in npm · sorted newest first- May 28, 2026
Malicious code in @cloudplatform-single-spa/svp-interfaces (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/svp-images (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/svp-gitaas (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/svp-gateways (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/svp-draas (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/svp-bare-metal-servers (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/svp-baas (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/svp-anti-affinity (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/svp-agent-backup (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/support (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/subnets (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/static-page (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ssh-keys (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/solutions (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/smk (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/serverless-containers (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/self-service (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/security-groups (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/secret-manager (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/search (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/resource-manager (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/redirect (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/rabbitmq (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/profile (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/postgre (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/pangolin (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/paas-redis (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/paas-kafka (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/opensearch (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/onboarding (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/observability (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/notification-gateway (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/monitoring (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/monaas-ui (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/mlspace-access-request (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-rag (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-router (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-model-run (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-marketplace (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-docker-run (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-comfy-run (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-foundation-models (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-finetuning (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-trigger (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-system-prompt (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-mcp-server (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-marketplace (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-ide (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-evo-claw (npm)
Page 74 of 4,802