Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 14, 2025
Malicious code in shack-pulsar-yitx (npm)
- Aug 14, 2025
Malicious code in shack-observatory-mv7m (npm)
- Aug 14, 2025
Malicious code in shack-maple-h5xi (npm)
- Aug 14, 2025
Malicious code in shack-falcon-fwnm (npm)
- Aug 14, 2025
Malicious code in shack-comet-9me2 (npm)
- Aug 14, 2025
Malicious code in shabuside-mimi (npm)
- Aug 14, 2025
Malicious code in sha256-validation (npm)
31 compromised versions
- Aug 14, 2025
Malicious code in sha256-cbc (npm)
- Aug 14, 2025
Malicious code in sh-utils (npm)
- Aug 14, 2025
Malicious code in sgyums (npm)
- Aug 14, 2025
Malicious code in sgmulford (npm)
- Aug 14, 2025
Malicious code in sglk-dev-tools (npm)
- Aug 14, 2025
Malicious code in sgiuteg (npm)
- Aug 14, 2025
Malicious code in sgetris (npm)
- Aug 14, 2025
Malicious code in sfrewe23 (npm)
- Aug 14, 2025
Malicious code in sfi-service-ppn (npm)
- Aug 14, 2025
Malicious code in sfhbxpcjwmzriody (npm)
- Aug 14, 2025
Malicious code in sfgitdemo (npm)
- Aug 14, 2025
Malicious code in sffood (npm)
- Aug 14, 2025
Malicious code in sfcc-sdapi (npm)
- Aug 14, 2025
Malicious code in SexyJS (npm)
- Aug 14, 2025
Malicious code in sewing-kit-plugin-quilt (npm)
- Aug 14, 2025
Malicious code in sew23 (npm)
- Aug 14, 2025
Malicious code in setupvps (npm)
- Aug 14, 2025
Malicious code in setup-jsonnet (npm)
- Aug 14, 2025
Malicious code in setup-grunt (npm)
- Aug 14, 2025
Malicious code in setup-foreman (npm)
- Aug 14, 2025
Malicious code in setup-docker (npm)
- Aug 14, 2025
Malicious code in settingsjs (npm)
- Aug 14, 2025
Malicious code in setihome (npm)
- Aug 14, 2025
Malicious code in setidane-tea (npm)
- Aug 14, 2025
Malicious code in sethelper (npm)
- Aug 14, 2025
Malicious code in setheight (npm)
- Aug 14, 2025
Malicious code in setare (npm)
- Aug 14, 2025
Malicious code in set-object-path (npm)
- Aug 14, 2025
Malicious code in set-content-type (npm)
- Aug 14, 2025
Malicious code in session-jmodule (npm)
- Aug 14, 2025
Malicious code in servicestack (npm)
- Aug 14, 2025
Malicious code in servicescore (npm)
- Aug 14, 2025
Malicious code in service-stack (npm)
- Aug 14, 2025
Malicious code in service-edge (npm)
- Aug 14, 2025
Malicious code in service-content-consumers (npm)
- Aug 14, 2025
Malicious code in serverless-slack-app (npm)
- Aug 14, 2025
Malicious code in serverless-router (npm)
- Aug 14, 2025
Malicious code in serverless-plugin-rds-trigger (npm)
- Aug 14, 2025
Malicious code in server-superposition-grus-asthenosphere (npm)
- Aug 14, 2025
Malicious code in server-push-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in server-mini-css-extract-plugin-orogeny-spawn (npm)
- Aug 14, 2025
Malicious code in server-kastra-paleoceanography-fornax (npm)
- Aug 14, 2025
Malicious code in server-for-testing (npm)
Page 5760 of 7,293