Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in client-connector-socket.io (npm)
- Aug 14, 2025
Malicious code in clickredirect (npm)
- Aug 14, 2025
Malicious code in click-apps-library (npm)
- Aug 14, 2025
Malicious code in cli-theme (npm)
- Aug 14, 2025
Malicious code in cli-tachyon-speleology-phylogenetics (npm)
- Aug 14, 2025
Malicious code in cli-support (npm)
- Aug 14, 2025
Malicious code in cli-redshift-leda-publish (npm)
- Aug 14, 2025
Malicious code in cli-qa (npm)
- Aug 14, 2025
Malicious code in cli-plugin-script (npm)
- Aug 14, 2025
Malicious code in cli-plugin-ngrok (npm)
- Aug 14, 2025
Malicious code in cli-plugin-migrate (npm)
- Aug 14, 2025
Malicious code in cli-plugin-graphql (npm)
- Aug 14, 2025
Malicious code in cli-plugin-graphiql (npm)
- Aug 14, 2025
Malicious code in cli-jbook-2023-els (npm)
- Aug 14, 2025
Malicious code in cli-janus-norma-lightyear (npm)
- Aug 14, 2025
Malicious code in cli-ini-fetch-geckodriver (npm)
- Aug 14, 2025
Malicious code in cli-hydrogen (npm)
- Aug 14, 2025
Malicious code in cli-h2-test (npm)
- Aug 14, 2025
Malicious code in cli-form (npm)
- Aug 14, 2025
Malicious code in cli-cressida-tool-supercluster (npm)
- Aug 14, 2025
Malicious code in cli-configs (npm)
- Aug 14, 2025
Malicious code in cli-aether-superposition-blueshift (npm)
- Aug 14, 2025
Malicious code in clgskhbepwjdnkiy (npm)
- Aug 14, 2025
Malicious code in cleanzen (npm)
- Aug 14, 2025
Malicious code in cleanchat (npm)
- Aug 14, 2025
Malicious code in clean_sentence (npm)
- Aug 14, 2025
Malicious code in clean-blog (npm)
- Aug 14, 2025
Malicious code in class-zeta-sun-epsilon-log (npm)
- Aug 14, 2025
Malicious code in clasp-nuzzle-fot819-project (npm)
- Aug 14, 2025
Malicious code in clasker (npm)
- Aug 14, 2025
Malicious code in clasicos (npm)
- Aug 14, 2025
Malicious code in clashbot (npm)
- Aug 14, 2025
Malicious code in clarity-atoms (npm)
- Aug 14, 2025
Malicious code in claris-schemas (npm)
- Aug 14, 2025
Malicious code in clapton (npm)
- Aug 14, 2025
Malicious code in cladistics-tardigrade-blueshift-primatology (npm)
- Aug 14, 2025
Malicious code in cladistics-markdown-pdf-loop-transform (npm)
- Aug 14, 2025
Malicious code in cladistics-karma-procyon-eris (npm)
- Aug 14, 2025
Malicious code in cladistics-interstellarmedium-aether-perturbation (npm)
- Aug 14, 2025
Malicious code in ckvxgprsafzltedy (npm)
- Aug 14, 2025
Malicious code in ckeditor5-s3-upload (npm)
- Aug 14, 2025
Malicious code in cjvifzdwptumhqra (npm)
- Aug 14, 2025
Malicious code in cjvdel (npm)
- Aug 14, 2025
Malicious code in cjkbrzfawhsudito (npm)
- Aug 14, 2025
Malicious code in cjblog (npm)
- Aug 14, 2025
Malicious code in cj-tests-2fa (npm)
- Aug 14, 2025
Malicious code in cixpher (npm)
- Aug 14, 2025
Malicious code in civilians (npm)
- Aug 14, 2025
Malicious code in civgame (npm)
- Aug 14, 2025
Malicious code in cityfury (npm)
Page 5649 of 6,634