Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in seuzelizke (npm)
- Aug 19, 2022
Malicious code in serh-eindex (npm)
- Aug 19, 2022
Malicious code in sequxeliwz (npm)
- Aug 19, 2022
Malicious code in senbg (npm)
- Aug 19, 2022
Malicious code in semvee-index (npm)
- Aug 19, 2022
Malicious code in semre (npm)
- Aug 19, 2022
Malicious code in semantic-u-resct (npm)
- Aug 19, 2022
Malicious code in semanitco-i-react (npm)
- Aug 19, 2022
Malicious code in seacpe-string-regexp (npm)
- Aug 19, 2022
Malicious code in se4raverse (npm)
- Aug 19, 2022
Malicious code in sass-lwadeoq (npm)
- Aug 19, 2022
Malicious code in sass-loadre (npm)
- Aug 19, 2022
Malicious code in sanitize-figlgname (npm)
- Aug 19, 2022
Malicious code in saniibe-filename (npm)
- Aug 19, 2022
Malicious code in saciize-html (npm)
- Aug 19, 2022
Malicious code in s3en (npm)
- Aug 19, 2022
Malicious code in rzedux-thunak (npm)
- Aug 19, 2022
Malicious code in rycursive-rfaddir (npm)
- Aug 19, 2022
Malicious code in rxzjsy-compat (npm)
- Aug 19, 2022
Malicious code in rx3egexp (npm)
- Aug 19, 2022
Malicious code in rwvoloe (npm)
- Aug 19, 2022
Malicious code in runtlcontribconcat (npm)
- Aug 19, 2022
Malicious code in ruglp (npm)
- Aug 19, 2022
Malicious code in rstify (npm)
- Aug 19, 2022
Malicious code in rsead-pk (npm)
- Aug 19, 2022
Malicious code in rsckjs (npm)
- Aug 19, 2022
Malicious code in rrcputli (npm)
- Aug 19, 2022
Malicious code in rpety-ms (npm)
- Aug 19, 2022
Malicious code in rolup-lugintils (npm)
- Aug 19, 2022
Malware in sfebuffer
1 compromised version
- Aug 19, 2022
Malware in rxzjsy-compat
1 compromised version
- Aug 19, 2022
Malware in runtlcontribconcat
1 compromised version
- Aug 19, 2022
Malware in serh-eindex
1 compromised version
- Aug 19, 2022
Malware in rolup-lugintils
1 compromised version
- Aug 19, 2022
Malware in source-ap-loadper
1 compromised version
- Aug 19, 2022
Malware in sfit
1 compromised version
- Aug 19, 2022
Malware in rsckjs
1 compromised version
- Aug 19, 2022
Malware in slughifvy
1 compromised version
- Aug 19, 2022
Malware in soudl
1 compromised version
- Aug 19, 2022
Malware in rwvoloe
1 compromised version
- Aug 19, 2022
Malware in semvee-index
1 compromised version
- Aug 19, 2022
Malware in rstify
1 compromised version
- Aug 19, 2022
Malware in socket.ioo-cient
1 compromised version
- Aug 19, 2022
Malware in rsead-pk
1 compromised version
- Aug 19, 2022
Malware in sequxeliwz
1 compromised version
- Aug 19, 2022
Malware in rycursive-rfaddir
1 compromised version
- Aug 19, 2022
Malware in saciize-html
1 compromised version
- Aug 19, 2022
Malware in saniibe-filename
1 compromised version
- Aug 19, 2022
Malware in son-stringiy-safe
1 compromised version
- Aug 19, 2022
Malware in rrcputli
1 compromised version
Page 7018 of 7,293