Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Aug 14, 2025
Malicious code in superflare-fork-pyxis-redis (npm)
- Aug 14, 2025
Malicious code in superflare-exec-selenium-gravitationalwave (npm)
- Aug 14, 2025
Malicious code in superflare-epimetheus-typeorm-archaeoastronomy (npm)
- Aug 14, 2025
Malicious code in superflare-centaurus-exosphere-adonis (npm)
- Aug 14, 2025
Malicious code in superflare-cache-eigenstate-xenos (npm)
- Aug 14, 2025
Malicious code in superdupertopsecretclassifiedsourcecode (npm)
- Aug 14, 2025
Malicious code in superdeep (npm)
- Aug 14, 2025
Malicious code in supercluster-sass-loader-cosmos-react-bootstrap (npm)
- Aug 14, 2025
Malicious code in supercluster-less-meteor-capella (npm)
- Aug 14, 2025
Malicious code in supercamp (npm)
- Aug 14, 2025
Malicious code in supercal (npm)
- Aug 14, 2025
Malicious code in superagent-process-hermes-antares (npm)
- Aug 14, 2025
Malicious code in superagent-miranda-selenium-dynamo (npm)
- Aug 14, 2025
Malicious code in super-scraper-client (npm)
- Aug 14, 2025
Malicious code in super-private-danger (npm)
- Aug 14, 2025
Malicious code in sunset-whale-zab065-project (npm)
- Aug 14, 2025
Malicious code in sunset-violet-yjd086-project (npm)
- Aug 14, 2025
Malicious code in sunset-vine-nzo557-project (npm)
- Aug 14, 2025
Malicious code in sunset-quasar-rbi320-project (npm)
- Aug 14, 2025
Malicious code in sunset-quail-pmh997-project (npm)
- Aug 14, 2025
Malicious code in sunset-honey-ukw334-project (npm)
- Aug 14, 2025
Malicious code in sunset-fox-que866-project (npm)
- Aug 14, 2025
Malicious code in sunset-fern-aiv334-project (npm)
- Aug 14, 2025
Malicious code in sunset-evergreen-pbm762-project (npm)
- Aug 14, 2025
Malicious code in sunset-acorn-ske135-project (npm)
- Aug 14, 2025
Malicious code in sunruse-math-vector (npm)
- Aug 14, 2025
Malicious code in sunruse-math-aabb (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-toolchain (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-platforms-javascript (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-platforms-helpers (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-platforms-c (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-libraries (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-grunt (npm)
- Aug 14, 2025
Malicious code in sunruse-influx-cli (npm)
- Aug 14, 2025
Malicious code in sunmoon (npm)
- Aug 14, 2025
Malicious code in sunjaydut (npm)
- Aug 14, 2025
Malicious code in sunarp (npm)
- Aug 14, 2025
Malicious code in sun-cloud-sudo-array-benchmark (npm)
- Aug 14, 2025
Malicious code in summoners (npm)
- Aug 14, 2025
Malicious code in summaryze (npm)
- Aug 14, 2025
Malicious code in sujycqmzpahrvbft (npm)
- Aug 14, 2025
Malicious code in suite-level-tags (npm)
- Aug 14, 2025
Malicious code in suimello (npm)
- Aug 14, 2025
Malicious code in suharno (npm)
- Aug 14, 2025
Malicious code in sugr (npm)
- Aug 14, 2025
Malicious code in sugarftp (npm)
- Aug 14, 2025
Malicious code in sugar-test-core-separation (npm)
- Aug 14, 2025
Malicious code in sugar-es7 (npm)
- Aug 14, 2025
Malicious code in sugar-core-test (npm)
- Aug 14, 2025
Malicious code in suerpeng (npm)
Page 5772 of 7,328