Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,337 total · sorted newest first- Oct 16, 2024
Malicious code in slateor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in simple-app-subdir (npm)
1 compromised version
- Oct 16, 2024
Malicious code in silent-plum-tuna (npm)
1 compromised version
- Oct 16, 2024
Malicious code in siilobv (npm)
1 compromised version
- Oct 16, 2024
Malicious code in signature-v4-multi-region (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sharp-linux-x64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sharp-libvips-linux-x64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in shardlier (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sfly-mobile-cart (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sethroght (npm)
1 compromised version
- Oct 16, 2024
Malicious code in semantic-red-elephant (npm)
1 compromised version
- Oct 16, 2024
Malicious code in semantic-orange-shrew (npm)
1 compromised version
- Oct 16, 2024
Malicious code in selfish-blush-newt (npm)
1 compromised version
- Oct 16, 2024
Malicious code in selected-lavender-asp (npm)
1 compromised version
- Oct 16, 2024
Malicious code in seismic2022 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in securedrop (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in secret-orange-junglefowl (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sec-dep-demo (npm)
1 compromised version
- Oct 16, 2024
Malicious code in searchwp-live-ajax-search (npm)
1 compromised version
- Oct 16, 2024
Malicious code in scm-design-system (npm)
1 compromised version
- Oct 16, 2024
Malicious code in scc-quack (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sc-qucak (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sc-quakq (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sc-quakc (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sc-quac (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sbhduoe (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sb_directbanking_ui (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap_account (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-ageverify (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-adminname (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-adminmail (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-adminid (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-adminemail (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-admin (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-admid (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-adduser (npm)
1 compromised version
- Oct 16, 2024
Malicious code in sap-actions (npm)
1 compromised version
- Oct 16, 2024
Malicious code in s-quack (npm)
1 compromised version
- Oct 16, 2024
Malicious code in rustc_codegen_cranelift-github-release (npm)
4 compromised versions
- Oct 16, 2024
Malicious code in rs-downloaders (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in rs-downloader (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in routesmap (npm)
1 compromised version
- Oct 16, 2024
Malicious code in romantic-white-skink (npm)
1 compromised version
- Oct 16, 2024
Malicious code in rollup-linux-x64-gnu (npm)
1 compromised version
- Oct 16, 2024
Malicious code in rollup-darwin-x64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in nuxtjs_dotenv (npm)
1 compromised version
- Oct 16, 2024
Malicious code in rigid-bronze-mammal (npm)
1 compromised version
- Oct 16, 2024
Malicious code in resolve-extends (npm)
1 compromised version
- Oct 16, 2024
Malicious code in replaceyourbuild (npm)
1 compromised version
- Oct 16, 2024
Malicious code in register_zellepay (npm)
3 compromised versions
Page 6531 of 7,307