Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in stormxing (npm)
- Aug 14, 2025
Malicious code in stormusa (npm)
- Aug 14, 2025
Malicious code in stormondemand (npm)
- Aug 14, 2025
Malicious code in stormblog (npm)
- Aug 14, 2025
Malicious code in storj-playwright-ui (npm)
- Aug 14, 2025
Malicious code in storiapp (npm)
- Aug 14, 2025
Malicious code in storeidcloud (npm)
- Aug 14, 2025
Malicious code in storeid (npm)
- Aug 14, 2025
Malicious code in storefront-kit-react (npm)
- Aug 14, 2025
Malicious code in storedvalueserv-paypal (npm)
- Aug 14, 2025
Malicious code in storedock (npm)
- Aug 14, 2025
Malicious code in storagefire (npm)
- Aug 14, 2025
Malicious code in stopmotor (npm)
- Aug 14, 2025
Malicious code in stop-vuepress-augmentedreality-dactyl (npm)
- Aug 14, 2025
Malicious code in stop-neutrino-altair-astrobiology (npm)
- Aug 14, 2025
Malicious code in stop-galaxy-commitlint-config-angular-parallax (npm)
- Aug 14, 2025
Malicious code in stolid (npm)
- Aug 14, 2025
Malicious code in stockwatcher (npm)
- Aug 14, 2025
Malicious code in stocatto (npm)
- Aug 14, 2025
Malicious code in stimmapp (npm)
- Aug 14, 2025
Malicious code in stereocam (npm)
- Aug 14, 2025
Malicious code in stepped (npm)
- Aug 14, 2025
Malicious code in stepbatch2023-mylib (npm)
- Aug 14, 2025
Malicious code in steklov (npm)
- Aug 14, 2025
Malicious code in stegogami (npm)
- Aug 14, 2025
Malicious code in stegfs (npm)
- Aug 14, 2025
Malicious code in steganography-superflare-charon-antares (npm)
- Aug 14, 2025
Malicious code in steganography-dactyl-css-loader-radiometric (npm)
- Aug 14, 2025
Malicious code in steganography-astrophysics-pyxis-photon (npm)
- Aug 14, 2025
Malicious code in stedin-ssp (npm)
- Aug 14, 2025
Malicious code in stedin-notes (npm)
- Aug 14, 2025
Malicious code in steamuniversal-api (npm)
- Aug 14, 2025
Malicious code in steam-digital-card-card108 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today850 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today763 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today660 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today528 (npm)
- Aug 14, 2025
Malicious code in steam-balance-today050 (npm)
- Aug 14, 2025
Malicious code in stealjon2 (npm)
- Aug 14, 2025
Malicious code in stealjon (npm)
- Aug 14, 2025
Malicious code in steal-ur-stuff (npm)
- Aug 14, 2025
Malicious code in staymo (npm)
- Aug 14, 2025
Malicious code in stax-cli (npm)
- Aug 14, 2025
Malicious code in stautses (npm)
- Aug 14, 2025
Malicious code in statusyo (npm)
- Aug 14, 2025
Malicious code in statuscml (npm)
- Aug 14, 2025
Malicious code in statusaas (npm)
- Aug 14, 2025
Malicious code in statsd-instrument (npm)
- Aug 14, 2025
Malicious code in stats-pattern-library (npm)
- Aug 14, 2025
Malicious code in stats-core-js-react-components (npm)
Page 5741 of 7,293