Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in chalk-spectron-webdriver-child-process-dione (npm)
- Aug 14, 2025
Malicious code in chalk-magellan-lacerta-request (npm)
- Aug 14, 2025
Malicious code in chalk-browserify-gulp-eventhoriz (npm)
- Aug 14, 2025
Malicious code in chalk-atlas-loopback-scripts (npm)
- Aug 14, 2025
Malicious code in chalc (npm)
- Aug 14, 2025
Malicious code in chakra-ui-xenos-envconfig-luminescence (npm)
- Aug 14, 2025
Malicious code in chakra-ui-blitz-blitz-webpack (npm)
- Aug 14, 2025
Malicious code in chakl (npm)
- Aug 14, 2025
Malicious code in chakert (npm)
- Aug 14, 2025
Malicious code in chakalaka (npm)
- Aug 14, 2025
Malicious code in chak (npm)
- Aug 14, 2025
Malicious code in chair-script (npm)
- Aug 14, 2025
Malicious code in chair-cms (npm)
- Aug 14, 2025
Malicious code in chai-terser-forever-wormhole (npm)
- Aug 14, 2025
Malicious code in chacas (npm)
- Aug 14, 2025
Malicious code in chabwork (npm)
- Aug 14, 2025
Malicious code in ch.post.sap.fototool (npm)
- Aug 14, 2025
Malicious code in ch-react-search (npm)
- Aug 14, 2025
Malicious code in ch-react-modal (npm)
- Aug 14, 2025
Malicious code in ch-react-menu (npm)
- Aug 14, 2025
Malicious code in ch-react-listselector (npm)
- Aug 14, 2025
Malicious code in ch-react-help (npm)
- Aug 14, 2025
Malicious code in ch-react-dropdown (npm)
- Aug 14, 2025
Malicious code in ch-react-avatar (npm)
- Aug 14, 2025
Malicious code in ch-react-actionmenu (npm)
- Aug 14, 2025
Malicious code in cgpngsqc (npm)
- Aug 14, 2025
Malicious code in cgplcrc (npm)
- Aug 14, 2025
Malicious code in cgmjasxzuliovnqk (npm)
- Aug 14, 2025
Malicious code in cggurb (npm)
- Aug 14, 2025
Malicious code in cgeqtowidauyhsjp (npm)
- Aug 14, 2025
Malicious code in cgdcbxd (npm)
- Aug 14, 2025
Malicious code in cfx-login-modal (npm)
- Aug 14, 2025
Malicious code in cftoxml (npm)
- Aug 14, 2025
Malicious code in cfscardlifecycleserv (npm)
- Aug 14, 2025
Malicious code in cfn2ts (npm)
- Aug 14, 2025
Malicious code in cflash (npm)
- Aug 14, 2025
Malicious code in cfinance (npm)
- Aug 14, 2025
Malicious code in cfer-toolkit (npm)
- Aug 14, 2025
Malicious code in cf-topic (npm)
- Aug 14, 2025
Malicious code in cf-menubar-pkg (npm)
- Aug 14, 2025
Malicious code in cexcel (npm)
- Aug 14, 2025
Malicious code in certica-mui-template (npm)
- Aug 14, 2025
Malicious code in ceres-luna-andromeda-envconfig (npm)
- Aug 14, 2025
Malicious code in ceres-capella-babel-commitlint (npm)
- Aug 14, 2025
Malicious code in cerebra (npm)
- Aug 14, 2025
Malicious code in cerealfan (npm)
- Aug 14, 2025
Malicious code in ceproject (npm)
- Aug 14, 2025
Malicious code in centralplace (npm)
- Aug 14, 2025
Malicious code in centersvg (npm)
- Aug 14, 2025
Malicious code in centering (npm)
Page 5656 of 6,634