Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 25, 2024
Malicious code in suparhit-movie-watching-john-wick-chapter-4-fullmovies-online-at-home01 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in suparhit-movie-watching-john-wick-chapter-4-fullmovies-online-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sun-flare (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in summoners-war-latest-tool-2023 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in stylelint-config-promo (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in styled-beautify-components (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in stripe-apps-deep (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in stream-watch-creed-3-full-movies-hd-online-at-home-free-4k (npm)
1 compromised version
- Jun 25, 2024
Malicious code in stream-tu-jhoothi-main-makkar-on-fullmovies-online-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in stormapz (npm)
1 compromised version
- Jun 25, 2024
Malicious code in stitch-ui-toolbox (npm)
8 compromised versions
- Jun 25, 2024
Malicious code in starter-assets-sass (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in staging-proxy (npm)
1 compromised version
- Jun 25, 2024
Malicious code in staff-lite (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in sshwifty-ui (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sshwifty (npm)
1 compromised version
- Jun 25, 2024
Malicious code in squarespace-abtest (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sq-themes (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sq-table (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sq-shared (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sq-menu (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sq-icons (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sq-assets (npm)
1 compromised version
- Jun 25, 2024
Malicious code in spring-projects (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in spg-web-tools-compressor (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in spectator-conf (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sp400 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sp-image-edit (npm)
1 compromised version
- Jun 25, 2024
Malicious code in source-registry-storage-adapter (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in source-map-sync-tool (npm)
1 compromised version
- Jun 25, 2024
Malicious code in solocal (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sol-spltoken (npm)
1 compromised version
- Jun 25, 2024
Malicious code in socket.io-client-v2 (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in sn-common-lib (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in sn-canvas-common (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in smithy-typescript11 (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in slotbooking-ui (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in slimmage (npm)
1 compromised version
- Jun 25, 2024
Malicious code in skud-client-base (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in sks-themes (npm)
1 compromised version
- Jun 25, 2024
Malicious code in skinport-rest-docs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in skeletor-block-facetwp-filter (npm)
1 compromised version
- Jun 25, 2024
Malicious code in signingroom-app (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in signals-logger (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sift-web-sdk (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in shri_krishna_ramamand_sagar_1994_dvd3_esub_rar_gj (npm)
1 compromised version
- Jun 25, 2024
Malicious code in shopify-app-template-php (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sherlock-front (npm)
1 compromised version
- Jun 25, 2024
Malicious code in shazam-fury-of-the-gods-watching-full-online-free-on-streaming-at-index-main (npm)
1 compromised version
- Jun 25, 2024
Malicious code in shazam-fury-of-the-gods-2023-full-online-free-on-streaming-at-index-main (npm)
1 compromised version
Page 6696 of 7,293