Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Aug 14, 2025
Malicious code in svnurl (npm)
- Aug 14, 2025
Malicious code in svnrepo (npm)
- Aug 14, 2025
Malicious code in svmacs (npm)
- Aug 14, 2025
Malicious code in svhakbucfimyqljk (npm)
- Aug 14, 2025
Malicious code in svg-presentation (npm)
- Aug 14, 2025
Malicious code in svg-page-browser (npm)
- Aug 14, 2025
Malicious code in svg-mixer-test (npm)
- Aug 14, 2025
Malicious code in svg-config-viewer (npm)
- Aug 14, 2025
Malicious code in svenum (npm)
- Aug 14, 2025
Malicious code in sveltejs (npm)
- Aug 14, 2025
Malicious code in sv-floorplan (npm)
- Aug 14, 2025
Malicious code in suvijay (npm)
- Aug 14, 2025
Malicious code in sutterhealth-ui-toolkit-widgets (npm)
- Aug 14, 2025
Malicious code in sutter-rdd-services (npm)
- Aug 14, 2025
Malicious code in sutter-health-widgets (npm)
- Aug 14, 2025
Malicious code in sutter-health-user-authentication (npm)
- Aug 14, 2025
Malicious code in sutter-health-eval (npm)
- Aug 14, 2025
Malicious code in sutter-health-data-services (npm)
- Aug 14, 2025
Malicious code in sutter-health-analytics (npm)
- Aug 14, 2025
Malicious code in susy-flexbox (npm)
- Aug 14, 2025
Malicious code in sus-support (npm)
- Aug 14, 2025
Malicious code in suryasetyani (npm)
- Aug 14, 2025
Malicious code in surya-ubi6-sukiwir (npm)
- Aug 14, 2025
Malicious code in surya-tapai89-kuki (npm)
- Aug 14, 2025
Malicious code in surya-sego36-sukiwir (npm)
- Aug 14, 2025
Malicious code in surya-nasi84-kuki (npm)
- Aug 14, 2025
Malicious code in surya-martabak100-breki (npm)
- Aug 14, 2025
Malicious code in surya-bubursumsum8-breki (npm)
- Aug 14, 2025
Malicious code in survtest (npm)
- Aug 14, 2025
Malicious code in surpaonchainagent (npm)
- Aug 14, 2025
Malicious code in suriyan (npm)
- Aug 14, 2025
Malicious code in surebets (npm)
- Aug 14, 2025
Malicious code in supervisor-spectroscopy-tardigrade-native (npm)
- Aug 14, 2025
Malicious code in supervisor-proxima-tailwindcss-frontend (npm)
- Aug 14, 2025
Malicious code in supervisor-json-winston-bulma (npm)
- Aug 14, 2025
Malicious code in supervisor-graviton-triton-iota (npm)
- Aug 14, 2025
Malicious code in supervisor-draco-socketio-hapi (npm)
- Aug 14, 2025
Malicious code in superslotmax (npm)
- Aug 14, 2025
Malicious code in superposition-leda-karma-neptune (npm)
- Aug 14, 2025
Malicious code in superposition-dagda-baryon-blackhole (npm)
- Aug 14, 2025
Malicious code in superposition-cosmochemistry-elektra-upgrade (npm)
- Aug 14, 2025
Malicious code in supernova-zest-baqn (npm)
- Aug 14, 2025
Malicious code in supernova-yam-cug4 (npm)
- Aug 14, 2025
Malicious code in supernova-romeo-uatb (npm)
- Aug 14, 2025
Malicious code in supernova-reef-zlot (npm)
- Aug 14, 2025
Malicious code in supernova-quince-ueq6 (npm)
- Aug 14, 2025
Malicious code in supermarket-pages (npm)
- Aug 14, 2025
Malicious code in superhappyfuntime (npm)
- Aug 14, 2025
Malicious code in supergrep (npm)
- Aug 14, 2025
Malicious code in superflare-react-bootstrap-playwright-antares (npm)
Page 5771 of 7,328