Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in centered-cover-background (npm)
- Aug 14, 2025
Malicious code in centered (npm)
- Aug 14, 2025
Malicious code in center-box (npm)
- Aug 14, 2025
Malicious code in centaurus-spica-fermiparadox-odin (npm)
- Aug 14, 2025
Malicious code in centaurus-release-it-jsonp-meteor (npm)
- Aug 14, 2025
Malicious code in centauri-pegasus-eslint-config-commitlint (npm)
- Aug 14, 2025
Malicious code in centauri-nebula-steganography-meteor (npm)
- Aug 14, 2025
Malicious code in centauri-magnetosphere-virgo-pipe (npm)
- Aug 14, 2025
Malicious code in centauri-hydra-node-config-avior (npm)
- Aug 14, 2025
Malicious code in centauri-eris-leda-remark (npm)
- Aug 14, 2025
Malicious code in centauri-ariel-shelljs-iota (npm)
- Aug 14, 2025
Malicious code in censorify_jinho82 (npm)
- Aug 14, 2025
Malicious code in cemerety (npm)
- Aug 14, 2025
Malicious code in cello-ini-parser (npm)
- Aug 14, 2025
Malicious code in cello-auto-register (npm)
- Aug 14, 2025
Malicious code in celestial-k4cf9-ew10m-quill-project (npm)
- Aug 14, 2025
Malicious code in celeste-yaml-aurora-jest (npm)
- Aug 14, 2025
Malicious code in celeste-testcafe-postgres-unuk (npm)
- Aug 14, 2025
Malicious code in celeste-radiant-yaml-command (npm)
- Aug 14, 2025
Malicious code in celeste-pm2-deimos-toml (npm)
- Aug 14, 2025
Malicious code in celeste-janus-biosignature-radiometric (npm)
- Aug 14, 2025
Malicious code in celeste-geoarchaeology-venus-dotenv (npm)
- Aug 14, 2025
Malicious code in cedrus-example-loader (npm)
- Aug 14, 2025
Malicious code in cecscope (npm)
- Aug 14, 2025
Malicious code in ce3r4 (npm)
- Aug 14, 2025
Malicious code in ce-market-insights-ui (npm)
- Aug 14, 2025
Malicious code in cdt-core (npm)
- Aug 14, 2025
Malicious code in cdrd (npm)
- Aug 14, 2025
Malicious code in cdo-apollo-server (npm)
- Aug 14, 2025
Malicious code in cdk-integ-tools (npm)
- Aug 14, 2025
Malicious code in cdd-vault (npm)
- Aug 14, 2025
Malicious code in cdcoop (npm)
- Aug 14, 2025
Malicious code in cdc-indicator (npm)
- Aug 14, 2025
Malicious code in ccymysql (npm)
- Aug 14, 2025
Malicious code in ccxte (npm)
- Aug 14, 2025
Malicious code in ccw2q (npm)
- Aug 14, 2025
Malicious code in ccuuli (npm)
- Aug 14, 2025
Malicious code in ccpawa (npm)
- Aug 14, 2025
Malicious code in ccpa-jurisdiction-sdk (npm)
- Aug 14, 2025
Malicious code in ccmarker (npm)
- Aug 14, 2025
Malicious code in cchappell (npm)
- Aug 14, 2025
Malicious code in cccisd-table (npm)
- Aug 14, 2025
Malicious code in cc2 (npm)
- Aug 14, 2025
Malicious code in cc-reporting (npm)
- Aug 14, 2025
Malicious code in cc-model-sql (npm)
- Aug 14, 2025
Malicious code in cbjourney (npm)
- Aug 14, 2025
Malicious code in cbg-log (npm)
- Aug 14, 2025
Malicious code in cbfour (npm)
- Aug 14, 2025
Malicious code in cb-serverless-plugins (npm)
- Aug 14, 2025
Malicious code in cb-iva-react-web-ui (npm)
Page 5657 of 6,634