Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in cici-mendut68-kuki (npm)
- Aug 14, 2025
Malicious code in cici-kolak59-breki (npm)
- Aug 14, 2025
Malicious code in cici-jengkol98-breki (npm)
- Aug 14, 2025
Malicious code in cici-gepuk26-sukiwir (npm)
- Aug 14, 2025
Malicious code in cici-gado-gado83-breki (npm)
- Aug 14, 2025
Malicious code in cici-bubursumsum20-sukiwir (npm)
- Aug 14, 2025
Malicious code in cici-bakwan18-breki (npm)
- Aug 14, 2025
Malicious code in cicada-render (npm)
- Aug 14, 2025
Malicious code in ciayo-logic (npm)
- Aug 14, 2025
Malicious code in cian-ui (npm)
- Aug 14, 2025
Malicious code in ciam-self-service-shared (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in ci_calculator_2024 (npm)
- Aug 14, 2025
Malicious code in ci-queue (npm)
- Aug 14, 2025
Malicious code in chuss-phuss (npm)
- Aug 14, 2025
Malicious code in chulapi (npm)
- Aug 14, 2025
Malicious code in chucklee (npm)
- Aug 14, 2025
Malicious code in chroop (npm)
- Aug 14, 2025
Malicious code in chronosgl (npm)
- Aug 14, 2025
Malicious code in chromezmc (npm)
- Aug 14, 2025
Malicious code in chromeless-remotechrome-servie (npm)
- Aug 14, 2025
Malicious code in chromedriver-websockets-altair-superagent (npm)
- Aug 14, 2025
Malicious code in chromedriver-metalsmith-arcturus-stop (npm)
- Aug 14, 2025
Malicious code in chromedriver-lint-staged-acamar-luminescence (npm)
- Aug 14, 2025
Malicious code in chromedriver-gacrux-neutronstar-backend (npm)
- Aug 14, 2025
Malicious code in chromedriver-acamar-html-webpack-plugin-delphinus (npm)
- Aug 14, 2025
Malicious code in chrodo (npm)
- Aug 14, 2025
Malicious code in chqshn (npm)
- Aug 14, 2025
Malicious code in chpokk (npm)
- Aug 14, 2025
Malicious code in chordplay (npm)
- Aug 14, 2025
Malicious code in cholera (npm)
- Aug 14, 2025
Malicious code in choad (npm)
- Aug 14, 2025
Malicious code in chlenix (npm)
- Aug 14, 2025
Malicious code in chlak (npm)
- Aug 14, 2025
Malicious code in chkyrslf (npm)
- Aug 14, 2025
Malicious code in chkspeed-67634893 (npm)
- Aug 14, 2025
Malicious code in chipins (npm)
- Aug 14, 2025
Malicious code in chiper (npm)
- Aug 14, 2025
Malicious code in chinachu (npm)
- Aug 14, 2025
Malicious code in chinabook (npm)
- Aug 14, 2025
Malicious code in chimera-dom (npm)
- Aug 14, 2025
Malicious code in chilis (npm)
- Aug 14, 2025
Malicious code in childprocess-tracker (npm)
- Aug 14, 2025
Malicious code in child-process-rigel-soap-comet (npm)
- Aug 14, 2025
Malicious code in child-process-asthenosphere-callisto-eventhoriz (npm)
- Aug 14, 2025
Malicious code in child-process-achernar-archaeogenetics-hapi (npm)
- Aug 14, 2025
Malicious code in chikusho (npm)
- Aug 14, 2025
Malicious code in chiken (npm)
- Aug 14, 2025
Malicious code in chialab-highlightable (npm)
- Aug 14, 2025
Malicious code in chi-old-encrypt-grep-delta (npm)
- Aug 14, 2025
Malicious code in chi-notify-info-theta-decode (npm)
Page 5651 of 6,634