Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in cheatmod (npm)
- Aug 14, 2025
Malicious code in cheaters (npm)
- Aug 14, 2025
Malicious code in che-theia-ssh-extension (npm)
- Aug 14, 2025
Malicious code in che-theia-activity-tracker (npm)
- Aug 14, 2025
Malicious code in chazer (npm)
- Aug 14, 2025
Malicious code in chavvelo (npm)
- Aug 14, 2025
Malicious code in chaunter (npm)
- Aug 14, 2025
Malicious code in chatvader (npm)
- Aug 14, 2025
Malicious code in chatscala (npm)
- Aug 14, 2025
Malicious code in chatruby (npm)
- Aug 14, 2025
Malicious code in chatham (npm)
- Aug 14, 2025
Malicious code in chatgroup (npm)
- Aug 14, 2025
Malicious code in chatarum (npm)
- Aug 14, 2025
Malicious code in chat-api2 (npm)
- Aug 14, 2025
Malicious code in chat-api1 (npm)
- Aug 14, 2025
Malicious code in chasteyes (npm)
- Aug 14, 2025
Malicious code in charrot (npm)
- Aug 14, 2025
Malicious code in charon-resolvers-bootes-lyra (npm)
- Aug 14, 2025
Malicious code in charon-npm-webpack-venus (npm)
- Aug 14, 2025
Malicious code in charon-enif-virgo-comet (npm)
- Aug 14, 2025
Malicious code in charon-blitz-socketio-nightwatch (npm)
- Aug 14, 2025
Malicious code in charmbox (npm)
- Aug 14, 2025
Malicious code in charlie-zym-project (npm)
- Aug 14, 2025
Malicious code in charlie-zulu-ugli-xuoal (npm)
- Aug 14, 2025
Malicious code in charlie-zulu-mowi (npm)
- Aug 14, 2025
Malicious code in charlie-zulu-jpkc (npm)
- Aug 14, 2025
Malicious code in charlie-ysd-project (npm)
- Aug 14, 2025
Malicious code in charlie-yankee-xmnd (npm)
- Aug 14, 2025
Malicious code in charlie-yankee-papa-dhtea (npm)
- Aug 14, 2025
Malicious code in charlie-y1q-project (npm)
- Aug 14, 2025
Malicious code in charlie-xy4-project (npm)
- Aug 14, 2025
Malicious code in charlie-xray-ivjk (npm)
- Aug 14, 2025
Malicious code in charlie-walnut-k9w1 (npm)
- Aug 14, 2025
Malicious code in charlie-vanilla-kcus (npm)
- Aug 14, 2025
Malicious code in charlie-vanilla-fdoy (npm)
- Aug 14, 2025
Malicious code in charlie-ugli-umzw (npm)
- Aug 14, 2025
Malicious code in charlie-u4y-project (npm)
- Aug 14, 2025
Malicious code in charlie-tango-lvoh (npm)
- Aug 14, 2025
Malicious code in charlie-tango-lima-mvztx (npm)
- Aug 14, 2025
Malicious code in charlie-tango-insn (npm)
- Aug 14, 2025
Malicious code in charlie-tango-emde (npm)
- Aug 14, 2025
Malicious code in charlie-strawberry-edzc (npm)
- Aug 14, 2025
Malicious code in charlie-quince-echo-pidtk (npm)
- Aug 14, 2025
Malicious code in charlie-quebec-mike-hsnpv (npm)
- Aug 14, 2025
Malicious code in charlie-qrj-project (npm)
- Aug 14, 2025
Malicious code in charlie-ppy-project (npm)
- Aug 14, 2025
Malicious code in charlie-p9x-project (npm)
- Aug 14, 2025
Malicious code in charlie-p1m-project (npm)
- Aug 14, 2025
Malicious code in charlie-orange-rtwz (npm)
- Aug 14, 2025
Malicious code in charlie-orange-novf (npm)
Page 5654 of 6,634