Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in cordova-sqlite-plugin-2 (npm)
- Aug 14, 2025
Malicious code in cordova-plugins-devextremeaddon (npm)
- Aug 14, 2025
Malicious code in cordova-plugin-wifi-monitoring (npm)
- Aug 14, 2025
Malicious code in cordova-plugin-secrets (npm)
- Aug 14, 2025
Malicious code in cordova-plugin-ooyala (npm)
- Aug 14, 2025
Malicious code in cordova-plugin-onyxbeacon (npm)
- Aug 14, 2025
Malicious code in cordova-plugin-ios-no-export-compliance (npm)
- Aug 14, 2025
Malicious code in cordova-plugin-firebase-lovespace (npm)
- Aug 14, 2025
Malicious code in cordova-plugin-devextremeaddon1 (npm)
- Aug 14, 2025
Malicious code in cordova-plugin-devextremeaddon (npm)
- Aug 14, 2025
Malicious code in cordova-ezar-video-overlay (npm)
- Aug 14, 2025
Malicious code in cordelia-transport-electron-builder-algol (npm)
- Aug 14, 2025
Malicious code in cordelia-sass-loader-ignite-graphql (npm)
- Aug 14, 2025
Malicious code in corb (npm)
- Aug 14, 2025
Malicious code in coralogix-azure-serverless (npm)
- Aug 14, 2025
Malicious code in coral_wnpul_4d26n_whirlwind (npm)
- Aug 14, 2025
Malicious code in coral_tl3vp_kud0s_yosemite (npm)
- Aug 14, 2025
Malicious code in coral_rvbon_jrbf7_fern (npm)
- Aug 14, 2025
Malicious code in coral-yeti-wvi805-project (npm)
- Aug 14, 2025
Malicious code in coral-yak-kgy897-project (npm)
- Aug 14, 2025
Malicious code in coral-violet-cjh501-project (npm)
- Aug 14, 2025
Malicious code in coral-savanna-rbt648-project (npm)
- Aug 14, 2025
Malicious code in coral-qun2y-frgjo-yeti-project (npm)
- Aug 14, 2025
Malicious code in coral-quill-tom161-project (npm)
- Aug 14, 2025
Malicious code in coral-quagmire-axk584-project (npm)
- Aug 14, 2025
Malicious code in coral-lcph3-fkdfa-amethyst-project (npm)
- Aug 14, 2025
Malicious code in coral-lagoon-qzq948-project (npm)
- Aug 14, 2025
Malicious code in coral-kekg4-0qtsz-star-project (npm)
- Aug 14, 2025
Malicious code in coral-everest-ebo861-project (npm)
- Aug 14, 2025
Malicious code in coral-0xfyr-p928y-jade-project (npm)
- Aug 14, 2025
Malicious code in copyleaks-plagiarism-checker (npm)
- Aug 14, 2025
Malicious code in copyfish-npm-2-8-5 (npm)
- Aug 14, 2025
Malicious code in copyboard (npm)
- Aug 14, 2025
Malicious code in copland (npm)
- Aug 14, 2025
Malicious code in copass (npm)
- Aug 14, 2025
Malicious code in cooni-expo (npm)
- Aug 14, 2025
Malicious code in coolpos (npm)
- Aug 14, 2025
Malicious code in cool-testing-7-9-2016 (npm)
- Aug 14, 2025
Malicious code in cookie-police (npm)
- Aug 14, 2025
Malicious code in cookie-loggers (npm)
- Aug 14, 2025
Malicious code in cookease (npm)
- Aug 14, 2025
Malicious code in conwayhs (npm)
- Aug 14, 2025
Malicious code in convolver (npm)
- Aug 14, 2025
Malicious code in convict-indus-loopback-ariel (npm)
- Aug 14, 2025
Malicious code in convict-centaurus-cosmology-odin (npm)
- Aug 14, 2025
Malicious code in convict-borealis-socketio-kardashevscale (npm)
- Aug 14, 2025
Malicious code in convict-astrometry-got-multiverse (npm)
- Aug 14, 2025
Malicious code in convertx (npm)
- Aug 14, 2025
Malicious code in convertom (npm)
- Aug 14, 2025
Malicious code in convertly-components (npm)
Page 5640 of 6,634