Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Aug 14, 2025
Malicious code in tabcmd (npm)
- Aug 14, 2025
Malicious code in taalame (npm)
- Aug 14, 2025
Malicious code in taachain (npm)
- Aug 14, 2025
Malicious code in t7rkow (npm)
- Aug 14, 2025
Malicious code in t5.admin (npm)
- Aug 14, 2025
Malicious code in t2c-web-admin (npm)
- Aug 14, 2025
Malicious code in syw-uikit (npm)
- Aug 14, 2025
Malicious code in sytheve (npm)
- Aug 14, 2025
Malicious code in systick (npm)
- Aug 14, 2025
Malicious code in systemd-watchdog-notify (npm)
- Aug 14, 2025
Malicious code in system-modeling (npm)
- Aug 14, 2025
Malicious code in sysr (npm)
- Aug 14, 2025
Malicious code in sysmap (npm)
- Aug 14, 2025
Malicious code in syscpar (npm)
- Aug 14, 2025
Malicious code in syscod (npm)
- Aug 14, 2025
Malicious code in syokinet (npm)
- Aug 14, 2025
Malicious code in synthetic-vegito-database (npm)
- Aug 14, 2025
Malicious code in synthetic-rqzax-database (npm)
- Aug 14, 2025
Malicious code in synthetic-horizon-database (npm)
- Aug 14, 2025
Malicious code in synthetic-deku (npm)
- Aug 14, 2025
Malicious code in syngenio_licensecheck (npm)
- Aug 14, 2025
Malicious code in synerj (npm)
- Aug 14, 2025
Malicious code in syncsub (npm)
- Aug 14, 2025
Malicious code in syncinfo (npm)
- Aug 14, 2025
Malicious code in synced-plus-agent (npm)
- Aug 14, 2025
Malicious code in synccft (npm)
- Aug 14, 2025
Malicious code in sync-yaml-command-ganymede (npm)
- Aug 14, 2025
Malicious code in sync-superagent-forever-singularitarianism (npm)
- Aug 14, 2025
Malicious code in sync-subscription-foundation-procyon (npm)
- Aug 14, 2025
Malicious code in sync-sampled-reviews-with-raw-reviews (npm)
- Aug 14, 2025
Malicious code in sync-color (npm)
- Aug 14, 2025
Malicious code in sync-chalk-cygnus-arcturus (npm)
- Aug 14, 2025
Malicious code in sync-astrochemistry-lithosphere-cordelia (npm)
- Aug 14, 2025
Malicious code in synbad (npm)
- Aug 14, 2025
Malicious code in symnrt (npm)
- Aug 14, 2025
Malicious code in symfonyc (npm)
- Aug 14, 2025
Malicious code in symbol-fstring (npm)
- Aug 14, 2025
Malicious code in symbcs (npm)
- Aug 14, 2025
Malicious code in sym-responsive (npm)
- Aug 14, 2025
Malicious code in syllabi (npm)
- Aug 14, 2025
Malicious code in sylabs (npm)
- Aug 14, 2025
Malicious code in sygerea (npm)
- Aug 14, 2025
Malicious code in sydcms (npm)
- Aug 14, 2025
Malicious code in sycamore-platform-components (npm)
- Aug 14, 2025
Malicious code in sycamore-platform (npm)
- Aug 14, 2025
Malicious code in sycamore-integration-postcodeanywhere (npm)
- Aug 14, 2025
Malicious code in sycamore-integration-mandrill (npm)
- Aug 14, 2025
Malicious code in sycamore-integration-kashflow (npm)
- Aug 14, 2025
Malicious code in sycamore-integration-freeagent (npm)
- Aug 14, 2025
Malicious code in sycamore-integration-evolution (npm)
Page 5769 of 7,328