Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 14, 2025
Malicious code in sensoplex (npm)
- Aug 14, 2025
Malicious code in senku-tea (npm)
- Aug 14, 2025
Malicious code in senginx (npm)
- Aug 14, 2025
Malicious code in senecacli (npm)
- Aug 14, 2025
Malicious code in sendgst (npm)
- Aug 14, 2025
Malicious code in send-alimail (npm)
- Aug 14, 2025
Malicious code in senchads (npm)
- Aug 14, 2025
Malicious code in semtypes (npm)
- Aug 14, 2025
Malicious code in semlinker (npm)
- Aug 14, 2025
Malicious code in semio-lever-model (npm)
- Aug 14, 2025
Malicious code in seminarc (npm)
- Aug 14, 2025
Malicious code in semideus (npm)
- Aug 14, 2025
Malicious code in semian (npm)
- Aug 14, 2025
Malicious code in semdroid (npm)
- Aug 14, 2025
Malicious code in semathrottle (npm)
- Aug 14, 2025
Malicious code in semantic-ui-restart-solarnebula-borealis (npm)
- Aug 14, 2025
Malicious code in semantic-ui-radiometric-tectonophysics-ethology (npm)
- Aug 14, 2025
Malicious code in semantic-ui-pm2-upgrade-hugo (npm)
- Aug 14, 2025
Malicious code in semantic-ui-perturbation-oortcloud-draco (npm)
- Aug 14, 2025
Malicious code in semantic-ui-nestjs-ionosphere-terser-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in semantic-ui-mongodb-proxima-lynx (npm)
- Aug 14, 2025
Malicious code in semantic-release-futurology-development-canopus (npm)
- Aug 14, 2025
Malicious code in semantic-release-atlas-google-kaus (npm)
- Aug 14, 2025
Malicious code in semanaibm (npm)
- Aug 14, 2025
Malicious code in sema-ui-components (npm)
- Aug 14, 2025
Malicious code in selper (npm)
- Aug 14, 2025
Malicious code in sellerhub-fe-featureflags (npm)
- Aug 14, 2025
Malicious code in selfpinger (npm)
- Aug 14, 2025
Malicious code in SelfieJS (npm)
- Aug 14, 2025
Malicious code in selfiehd (npm)
- Aug 14, 2025
Malicious code in self-require-trap (npm)
- Aug 14, 2025
Malicious code in selenium-exobiology-archaeogenetics-backend (npm)
- Aug 14, 2025
Malicious code in selenipy (npm)
- Aug 14, 2025
Malicious code in selektion (npm)
- Aug 14, 2025
Malicious code in selbstvorstellung (npm)
- Aug 14, 2025
Malicious code in selbans (npm)
- Aug 14, 2025
Malicious code in seismology-unuk-google-eleventy (npm)
- Aug 14, 2025
Malicious code in seif (npm)
- Aug 14, 2025
Malicious code in segpub (npm)
- Aug 14, 2025
Malicious code in segmentread-paypal (npm)
- Aug 14, 2025
Malicious code in segmentlifecycle-paypal (npm)
- Aug 14, 2025
Malicious code in segment-platform-functional-test (npm)
- Aug 14, 2025
Malicious code in seeren (npm)
- Aug 14, 2025
Malicious code in seer-js (npm)
- Aug 14, 2025
Malicious code in seemver (npm)
- Aug 14, 2025
Malicious code in seedling-viz-angular-wp2 (npm)
- Aug 14, 2025
Malicious code in sedona-angular-widget-launcher (npm)
- Aug 14, 2025
Malicious code in sedona-angular-gulp-tasks (npm)
- Aug 14, 2025
Malicious code in sedna-redshift-farout-umbriel (npm)
- Aug 14, 2025
Malicious code in sedna-proteomics-yaml-mantle (npm)
Page 5762 of 7,293