Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 14, 2025
Malicious code in sedna-helios-apex-antares (npm)
- Aug 14, 2025
Malicious code in sedna-dactyl-polaris-loglevel (npm)
- Aug 14, 2025
Malicious code in sedna-child-process-jasmine-impulse (npm)
- Aug 14, 2025
Malicious code in sedna-capella-paleoceanography-global (npm)
- Aug 14, 2025
Malicious code in sedinta (npm)
- Aug 14, 2025
Malicious code in sedimentology-xo-puppeteer-warp (npm)
- Aug 14, 2025
Malicious code in sedimentology-webdriver-manager-spectroscopy-writable (npm)
- Aug 14, 2025
Malicious code in sedimentology-mdx-rigel-planetology (npm)
- Aug 14, 2025
Malicious code in sedimentology-fork-gravitationalwave-eclipse (npm)
- Aug 14, 2025
Malicious code in sedimentology-ariel-mutation-geodynamo (npm)
- Aug 14, 2025
Malicious code in sedangky (npm)
- Aug 14, 2025
Malicious code in sed-simple-sandbox-reject-zero (npm)
- Aug 14, 2025
Malicious code in sed-new-protected-signal-small (npm)
- Aug 14, 2025
Malicious code in sed-good-finally-tree-xi (npm)
- Aug 14, 2025
Malicious code in sed-deploy-shell-cat-grid (npm)
- Aug 14, 2025
Malicious code in securitydb (npm)
- Aug 14, 2025
Malicious code in securitycontext-paypal (npm)
- Aug 14, 2025
Malicious code in security_reports (npm)
- Aug 14, 2025
Malicious code in security.txt (npm)
- Aug 14, 2025
Malicious code in securicrypt-api (npm)
- Aug 14, 2025
Malicious code in securiace (npm)
- Aug 14, 2025
Malicious code in secure_identity_login_module (npm)
- Aug 14, 2025
Malicious code in secure-sandbox-validate-public-reject (npm)
- Aug 14, 2025
Malicious code in secure-docs-app (npm)
- Aug 14, 2025
Malicious code in secure-daemon-bash-code-array (npm)
- Aug 14, 2025
Malicious code in secret_utility (npm)
- Aug 14, 2025
Malicious code in secden (npm)
- Aug 14, 2025
Malicious code in secbook-1to9 (npm)
- Aug 14, 2025
Malicious code in sec-learning (npm)
- Aug 14, 2025
Malicious code in sebrae (npm)
- Aug 14, 2025
Malicious code in seawall (npm)
- Aug 14, 2025
Malicious code in seaview (npm)
- Aug 14, 2025
Malicious code in searchend (npm)
- Aug 14, 2025
Malicious code in search_test_framework (npm)
- Aug 14, 2025
Malicious code in search-npm-blocking-manager (npm)
- Aug 14, 2025
Malicious code in search-fe (npm)
- Aug 14, 2025
Malicious code in sealord (npm)
- Aug 14, 2025
Malicious code in seajax (npm)
- Aug 14, 2025
Malicious code in seaborn-doc-zh (npm)
- Aug 14, 2025
Malicious code in se42 (npm)
- Aug 14, 2025
Malicious code in sdsdadasdsaxs (npm)
- Aug 14, 2025
Malicious code in sdpuicopy (npm)
- Aug 14, 2025
Malicious code in sdm630-modbus-tcp (npm)
- Aug 14, 2025
Malicious code in sdk-workshop (npm)
- Aug 14, 2025
Malicious code in sdjournal (npm)
- Aug 14, 2025
Malicious code in sdhajgdw (npm)
- Aug 14, 2025
Malicious code in sdhajgdaj (npm)
- Aug 14, 2025
Malicious code in sdfsfewetw1 (npm)
- Aug 14, 2025
Malicious code in sdfjghlkfjdshlkjdhsfg (npm)
- Aug 14, 2025
Malicious code in sderhmxgjyzakqbk (npm)
Page 5763 of 7,293