Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Aug 14, 2025
Malicious code in sycamore-integration-carweb (npm)
- Aug 14, 2025
Malicious code in sycamore-integration-bravolink (npm)
- Aug 14, 2025
Malicious code in sycamore-integration-basecamp (npm)
- Aug 14, 2025
Malicious code in sycamore-integration-algolia (npm)
- Aug 14, 2025
Malicious code in sycamore-erp (npm)
- Aug 14, 2025
Malicious code in sycamore-crm (npm)
- Aug 14, 2025
Malicious code in syarobot (npm)
- Aug 14, 2025
Malicious code in sxbznqp (npm)
- Aug 14, 2025
Malicious code in swxzmflbqpcythgv (npm)
- Aug 14, 2025
Malicious code in swrepo (npm)
- Aug 14, 2025
Malicious code in sworkit-workouts (npm)
- Aug 14, 2025
Malicious code in swokhgqmebtcpjir (npm)
- Aug 14, 2025
Malicious code in switcharoo-plugin-metrics (npm)
- Aug 14, 2025
Malicious code in switcharoo-plugin-ads (npm)
- Aug 14, 2025
Malicious code in switcharoo (npm)
- Aug 14, 2025
Malicious code in swiss-army-knife (npm)
- Aug 14, 2025
Malicious code in swishper (npm)
- Aug 14, 2025
Malicious code in swipable (npm)
- Aug 14, 2025
Malicious code in swinhoii (npm)
- Aug 14, 2025
Malicious code in swiftpdf (npm)
- Aug 14, 2025
Malicious code in swiftbits (npm)
- Aug 14, 2025
Malicious code in swift-search (npm)
- Aug 14, 2025
Malicious code in swift-playground-builder (npm)
1 compromised version
- Aug 14, 2025
Malicious code in swicks (npm)
- Aug 14, 2025
Malicious code in swfpoc (npm)
- Aug 14, 2025
Malicious code in swexikcykpgrtqud (npm)
- Aug 14, 2025
Malicious code in swembl (npm)
- Aug 14, 2025
Malicious code in swarmcube (npm)
- Aug 14, 2025
Malicious code in swaptrack (npm)
- Aug 14, 2025
Malicious code in swap_middleware (npm)
- Aug 14, 2025
Malicious code in swan-yucca-iir777-project (npm)
- Aug 14, 2025
Malicious code in swan-xenon-qnv320-project (npm)
- Aug 14, 2025
Malicious code in swan-vulture-djn616-project (npm)
- Aug 14, 2025
Malicious code in swan-violet-uzt995-project (npm)
- Aug 14, 2025
Malicious code in swan-savanna-kir735-project (npm)
- Aug 14, 2025
Malicious code in swan-rainbow-pfb803-project (npm)
- Aug 14, 2025
Malicious code in swan-quilt-zjk050-project (npm)
- Aug 14, 2025
Malicious code in swan-quartz-wbj886-project (npm)
- Aug 14, 2025
Malicious code in swan-piano-mtk716-project (npm)
- Aug 14, 2025
Malicious code in swan-nugget-ypo135-project (npm)
- Aug 14, 2025
Malicious code in swan-moon-xmh465-project (npm)
- Aug 14, 2025
Malicious code in swan-gorge-tpi279-project (npm)
- Aug 14, 2025
Malicious code in swan-delta-stt348-project (npm)
- Aug 14, 2025
Malicious code in swan-albatross-wmh804-project (npm)
- Aug 14, 2025
Malicious code in swaggerflowtypes (npm)
- Aug 14, 2025
Malicious code in swagger-to-server (npm)
- Aug 14, 2025
Malicious code in swa-persistence (npm)
- Aug 14, 2025
Malicious code in sw3mgw (npm)
- Aug 14, 2025
Malicious code in sw-reporter (npm)
- Aug 14, 2025
Malicious code in svplayer (npm)
Page 5770 of 7,328