Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in crust-celeste-entanglement-sirius (npm)
- Aug 14, 2025
Malicious code in crust-biogeochemistry-heliophysics-glaciology (npm)
- Aug 14, 2025
Malicious code in cruddr (npm)
- Aug 14, 2025
Malicious code in cruchbase (npm)
- Aug 14, 2025
Malicious code in crsrinf (npm)
- Aug 14, 2025
Malicious code in crpyto-js (npm)
- Aug 14, 2025
Malicious code in crpyto (npm)
- Aug 14, 2025
Malicious code in crown_zup1y_wopna_voyage (npm)
- Aug 14, 2025
Malicious code in crown_u7kcr_myapi_fireworks (npm)
- Aug 14, 2025
Malicious code in crown_ptbwr_bg4ri_velocity (npm)
- Aug 14, 2025
Malicious code in crown_mtpvv_tmlix_oasis (npm)
- Aug 14, 2025
Malicious code in crown_mm53x_rv9oc_labyrinth (npm)
- Aug 14, 2025
Malicious code in crown_kfv0w_e8v0k_saffron (npm)
- Aug 14, 2025
Malicious code in crown_6ph6g_mbe6l_fountain (npm)
- Aug 14, 2025
Malicious code in crossorm (npm)
- Aug 14, 2025
Malicious code in crossfeed-web (npm)
- Aug 14, 2025
Malicious code in cross-env-xanthus-luminescence-lyra (npm)
- Aug 14, 2025
Malicious code in cross-env-wormhole-passport-regulus (npm)
- Aug 14, 2025
Malicious code in cross-env-volcanology-less-loader-fetch (npm)
- Aug 14, 2025
Malicious code in cross-env-superagent-umbriel-mongodb (npm)
- Aug 14, 2025
Malicious code in cross-env-relay-commitlint-config-angular-configstore (npm)
- Aug 14, 2025
Malicious code in cross-env-darkenergy-zenith-palynology (npm)
- Aug 14, 2025
Malicious code in cross-env-canopus-stratosphere-local (npm)
- Aug 14, 2025
Malicious code in cross-env-blitz-bunyan-stream (npm)
- Aug 14, 2025
Malicious code in cropsim (npm)
- Aug 14, 2025
Malicious code in croppit (npm)
- Aug 14, 2025
Malicious code in croovy (npm)
- Aug 14, 2025
Malicious code in crookes (npm)
- Aug 14, 2025
Malicious code in cronosgit (npm)
- Aug 14, 2025
Malicious code in cronemod (npm)
- Aug 14, 2025
Malicious code in cronedit (npm)
- Aug 14, 2025
Malicious code in cromlech (npm)
- Aug 14, 2025
Malicious code in croler (npm)
- Aug 14, 2025
Malicious code in cro-defi-swap-periphery (npm)
- Aug 14, 2025
Malicious code in crnoib (npm)
- Aug 14, 2025
Malicious code in crmgit (npm)
- Aug 14, 2025
Malicious code in crm-ui (npm)
- Aug 14, 2025
Malicious code in criblib (npm)
- Aug 14, 2025
Malicious code in creze_admin (npm)
- Aug 14, 2025
Malicious code in cressida-ophiuchus-quark-cordelia (npm)
- Aug 14, 2025
Malicious code in cressida-nashira-vortex-csrf (npm)
- Aug 14, 2025
Malicious code in cressida-middleware-async-galaxy (npm)
- Aug 14, 2025
Malicious code in cressida-halley-magellan-norma (npm)
- Aug 14, 2025
Malicious code in cressida-geodynamo-nova-spica (npm)
- Aug 14, 2025
Malicious code in cressida-commitlint-config-angular-proteomics-development (npm)
- Aug 14, 2025
Malicious code in crescent-rr92c-saa7z-ripple-project (npm)
- Aug 14, 2025
Malicious code in crescent-psf25-ntsho-emerald-project (npm)
- Aug 14, 2025
Malicious code in crescent-nxzg9-fx27o-glow-project (npm)
- Aug 14, 2025
Malicious code in crescent-ntdfn-j7mhs-moonstone-project (npm)
- Aug 14, 2025
Malicious code in crescent-jdl4i-6z2mg-azure-project (npm)
Page 5637 of 6,634