Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in citrusdb (npm)
- Aug 14, 2025
Malicious code in citrix-ui (npm)
- Aug 14, 2025
Malicious code in citra-nasisayur87-breki (npm)
- Aug 14, 2025
Malicious code in citra-naget33-breki (npm)
- Aug 14, 2025
Malicious code in citra-kue86-breki (npm)
- Aug 14, 2025
Malicious code in citra-ketoprak65-kuki (npm)
- Aug 14, 2025
Malicious code in citra-keraktelor42-breki (npm)
- Aug 14, 2025
Malicious code in citra-gulai40-kuki (npm)
- Aug 14, 2025
Malicious code in citra-gulai4-kuki (npm)
- Aug 14, 2025
Malicious code in citipark (npm)
- Aug 14, 2025
Malicious code in citadel_jxrki_cxqr5_island (npm)
- Aug 14, 2025
Malicious code in citadel_9ai8f_ntah7_velocity (npm)
- Aug 14, 2025
Malicious code in citadel_4c3v1_akoop_night (npm)
- Aug 14, 2025
Malicious code in citadel_2k7xa_v5gjt_rose (npm)
- Aug 14, 2025
Malicious code in cistjx (npm)
- Aug 14, 2025
Malicious code in cisems (npm)
- Aug 14, 2025
Malicious code in ciscreapy (npm)
- Aug 14, 2025
Malicious code in cisco-vsm (npm)
- Aug 14, 2025
Malicious code in cisco-rio-mfc (npm)
- Aug 14, 2025
Malicious code in cisco-k8s (npm)
- Aug 14, 2025
Malicious code in cirrus-webserver (npm)
- Aug 14, 2025
Malicious code in circleci-test (npm)
- Aug 14, 2025
Malicious code in circleaf (npm)
- Aug 14, 2025
Malicious code in ciprat (npm)
- Aug 14, 2025
Malicious code in ciouco (npm)
- Aug 14, 2025
Malicious code in cionstring (npm)
- Aug 14, 2025
Malicious code in cinphone (npm)
- Aug 14, 2025
Malicious code in cinohpa (npm)
- Aug 14, 2025
Malicious code in cinesend-theme (npm)
- Aug 14, 2025
Malicious code in cinergy (npm)
- Aug 14, 2025
Malicious code in cinergi (npm)
- Aug 14, 2025
Malicious code in cinerama (npm)
- Aug 14, 2025
Malicious code in cinelerra (npm)
- Aug 14, 2025
Malicious code in cinefy (npm)
- Aug 14, 2025
Malicious code in cindy-tiwul35-breki (npm)
- Aug 14, 2025
Malicious code in cindy-tempe36-breki (npm)
- Aug 14, 2025
Malicious code in cindy-sate97-breki (npm)
- Aug 14, 2025
Malicious code in cindy-mieayam93-breki (npm)
- Aug 14, 2025
Malicious code in cindy-lengko24-sukiwir (npm)
- Aug 14, 2025
Malicious code in cindy-kacang69-breki (npm)
- Aug 14, 2025
Malicious code in cinclude (npm)
- Aug 14, 2025
Malicious code in cimpress-atsquad (npm)
1 compromised version
- Aug 14, 2025
Malicious code in cilive (npm)
- Aug 14, 2025
Malicious code in ciktajwgeylumznb (npm)
- Aug 14, 2025
Malicious code in cignal (npm)
- Aug 14, 2025
Malicious code in ciftsp (npm)
- Aug 14, 2025
Malicious code in cielocpp (npm)
- Aug 14, 2025
Malicious code in cici-sate75-kuki (npm)
- Aug 14, 2025
Malicious code in cici-mie39-sukiwir (npm)
- Aug 14, 2025
Malicious code in cici-menjes71-sukiwir (npm)
Page 5650 of 6,634