Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in chexxwars (npm)
- Aug 14, 2025
Malicious code in chestlink (npm)
- Aug 14, 2025
Malicious code in chessnut (npm)
- Aug 14, 2025
Malicious code in chessnet (npm)
- Aug 14, 2025
Malicious code in chesse (npm)
- Aug 14, 2025
Malicious code in cherry-zenith-p6qf (npm)
- Aug 14, 2025
Malicious code in cherry-yiu-project (npm)
- Aug 14, 2025
Malicious code in cherry-yellow-zvf108-project (npm)
- Aug 14, 2025
Malicious code in cherry-xigua-kiwi-fgrcc (npm)
- Aug 14, 2025
Malicious code in cherry-xigua-jxao (npm)
- Aug 14, 2025
Malicious code in cherry-watermelon-yankee-flaox (npm)
- Aug 14, 2025
Malicious code in cherry-vve-project (npm)
- Aug 14, 2025
Malicious code in cherry-void-4nca (npm)
- Aug 14, 2025
Malicious code in cherry-vista-vuo979-project (npm)
- Aug 14, 2025
Malicious code in cherry-vista-caa286-project (npm)
- Aug 14, 2025
Malicious code in cherry-uuv-project (npm)
- Aug 14, 2025
Malicious code in cherry-u3w-project (npm)
- Aug 14, 2025
Malicious code in cherry-tiger-sjw894-project (npm)
- Aug 14, 2025
Malicious code in cherry-tangerine-qzwb (npm)
- Aug 14, 2025
Malicious code in cherry-tangerine-oscar-hnucc (npm)
- Aug 14, 2025
Malicious code in cherry-strawberry-ycdz (npm)
- Aug 14, 2025
Malicious code in cherry-strawberry-wmge (npm)
- Aug 14, 2025
Malicious code in cherry-strawberry-kozu (npm)
- Aug 14, 2025
Malicious code in cherry-strawberry-axao (npm)
- Aug 14, 2025
Malicious code in cherry-sierra-yankee-mpbli (npm)
- Aug 14, 2025
Malicious code in cherry-sierra-mfwc (npm)
- Aug 14, 2025
Malicious code in cherry-s2l-project (npm)
- Aug 14, 2025
Malicious code in cherry-rks-project (npm)
- Aug 14, 2025
Malicious code in cherry-raspberry-lemon-kqipa (npm)
- Aug 14, 2025
Malicious code in cherry-raspberry-hopn (npm)
- Aug 14, 2025
Malicious code in cherry-quince-uvar (npm)
- Aug 14, 2025
Malicious code in cherry-quince-smhk (npm)
- Aug 14, 2025
Malicious code in cherry-quince-bpwv (npm)
- Aug 14, 2025
Malicious code in cherry-quill-zcx790-project (npm)
- Aug 14, 2025
Malicious code in cherry-quasar-vtw826-project (npm)
- Aug 14, 2025
Malicious code in cherry-pxx-project (npm)
- Aug 14, 2025
Malicious code in cherry-phz-project (npm)
- Aug 14, 2025
Malicious code in cherry-papaya-uniform-dfnzn (npm)
- Aug 14, 2025
Malicious code in cherry-papa-vanilla-kusid (npm)
- Aug 14, 2025
Malicious code in cherry-oscar-mlhc (npm)
- Aug 14, 2025
Malicious code in cherry-orchid-fdn814-project (npm)
- Aug 14, 2025
Malicious code in cherry-ocp-project (npm)
- Aug 14, 2025
Malicious code in cherry-nectarine-zucchini-tsgjz (npm)
- Aug 14, 2025
Malicious code in cherry-nectarine-kfwl (npm)
- Aug 14, 2025
Malicious code in cherry-mango-uniform-okaej (npm)
- Aug 14, 2025
Malicious code in cherry-lagoon-ipi883-project (npm)
- Aug 14, 2025
Malicious code in cherry-l9p-project (npm)
- Aug 14, 2025
Malicious code in cherry-kilo-whiskey-kchbb (npm)
- Aug 14, 2025
Malicious code in cherry-inferno-yqot (npm)
- Aug 14, 2025
Malicious code in cherry-india-raspberry-zrfxp (npm)
Page 5652 of 6,634