Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- May 28, 2026
Malicious code in @cloudplatform-single-spa/monitoring (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/monaas-ui (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/mlspace-access-request (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-rag (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-router (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-model-run (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-marketplace (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-docker-run (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference-comfy-run (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-inference (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-foundation-models (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-finetuning (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-trigger (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-system-prompt (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-mcp-server (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-marketplace (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-ide (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-evo-claw (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-agent-system (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/ml-ai-agents-agent (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/marketplace-main (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/marketplace-gigachat (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/marketplace-apps (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/managed-identities (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/magic-router (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/magic-bridge (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/logaas (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/key-manager (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/installations (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/iam (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/floating-ips (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/evolution (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/evocs (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/event-bus (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/enterprise (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/employees (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/edge-manager (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/document-db (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dns (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/disks (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform-trino (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform-spark (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform-nessie (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform-metastore (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform-flink (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform-connections (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform-clusters (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform-cloudberry (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform-bi (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/dataplatform (npm)
Page 134 of 5,122