Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in coinstirng (npm)
- Aug 14, 2025
Malicious code in coinrider (npm)
- Aug 14, 2025
Malicious code in coinpayment (npm)
- Aug 14, 2025
Malicious code in coin-master-spins-for-free-2023-april-jdkk (npm)
- Aug 14, 2025
Malicious code in coin-master-free-spins-in-april-2023-jekdk (npm)
- Aug 14, 2025
Malicious code in cognicor (npm)
- Aug 14, 2025
Malicious code in cogler (npm)
- Aug 14, 2025
Malicious code in cogicapp (npm)
- Aug 14, 2025
Malicious code in Coflux (npm)
- Aug 14, 2025
Malicious code in coffescript (npm)
- Aug 14, 2025
Malicious code in coffe-script (npm)
- Aug 14, 2025
Malicious code in cofeescript (npm)
- Aug 14, 2025
Malicious code in cofee-script (npm)
- Aug 14, 2025
Malicious code in cofcof (npm)
- Aug 14, 2025
Malicious code in cofarte-backend (npm)
- Aug 14, 2025
Malicious code in codeval (npm)
- Aug 14, 2025
Malicious code in codesweat (npm)
- Aug 14, 2025
Malicious code in codercms (npm)
- Aug 14, 2025
Malicious code in codepipeline (npm)
- Aug 14, 2025
Malicious code in codens-auth (npm)
- Aug 14, 2025
Malicious code in codemedo (npm)
- Aug 14, 2025
Malicious code in codegennativecomponent (npm)
- Aug 14, 2025
Malicious code in codeevent (npm)
- Aug 14, 2025
Malicious code in codedive (npm)
- Aug 14, 2025
Malicious code in coded_errors (npm)
- Aug 14, 2025
Malicious code in code-file-decompress-decompress-byte (npm)
- Aug 14, 2025
Malicious code in code-cloud-zeta-cold-tau (npm)
- Aug 14, 2025
Malicious code in code-book-thread-warn-load (npm)
- Aug 14, 2025
Malicious code in codder (npm)
- Aug 14, 2025
Malicious code in cocobe (npm)
- Aug 14, 2025
Malicious code in cockatoo (npm)
- Aug 14, 2025
Malicious code in cocha-logger-services (npm)
- Aug 14, 2025
Malicious code in cobrebem (npm)
- Aug 14, 2025
Malicious code in cobmind (npm)
- Aug 14, 2025
Malicious code in coalesce-utils (npm)
- Aug 14, 2025
Malicious code in coalesce-moltin (npm)
- Aug 14, 2025
Malicious code in coalesce-magento (npm)
- Aug 14, 2025
Malicious code in coalesce-generic (npm)
- Aug 14, 2025
Malicious code in coalesce-core (npm)
- Aug 14, 2025
Malicious code in coagulate (npm)
- Aug 14, 2025
Malicious code in coachmeup (npm)
- Aug 14, 2025
Malicious code in cnffjbeq (npm)
- Aug 14, 2025
Malicious code in cneural (npm)
- Aug 14, 2025
Malicious code in cmskell (npm)
- Aug 14, 2025
Malicious code in cms-web (npm)
- Aug 14, 2025
Malicious code in cmomander (npm)
- Aug 14, 2025
Malicious code in cmiskit (npm)
- Aug 14, 2025
Malicious code in cmg-web-modules (npm)
- Aug 14, 2025
Malicious code in cmf.mes.sampling (npm)
- Aug 14, 2025
Malicious code in cmf.mes.recipe (npm)
Page 5646 of 6,634