Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in cashpad (npm)
- Aug 14, 2025
Malicious code in cashfree-pg-koa-app (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-yur (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-www (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-ron (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-jbp (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-fft (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-erp (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-btc (npm)
- Aug 14, 2025
Malicious code in caseum (npm)
- Aug 14, 2025
Malicious code in caseblok (npm)
- Aug 14, 2025
Malicious code in case-supermodels (npm)
- Aug 14, 2025
Malicious code in cascade_x7bno_57b1b_daybreak (npm)
- Aug 14, 2025
Malicious code in cascade_qajvx_qv3p9_harmony (npm)
- Aug 14, 2025
Malicious code in cascade_q7kfh_i8il6_mystic (npm)
- Aug 14, 2025
Malicious code in cascade_phnht_ng8w0_opaline (npm)
- Aug 14, 2025
Malicious code in cascade_lcth4_b245i_antelope (npm)
- Aug 14, 2025
Malicious code in cascade_hd4kj_z4dhx_zephyr (npm)
- Aug 14, 2025
Malicious code in cascade_b3hwp_vtgle_illusion (npm)
- Aug 14, 2025
Malicious code in cascade_6wd35_l27dk_xylophone (npm)
- Aug 14, 2025
Malicious code in cascade_51cts_vwepo_ivy (npm)
- Aug 14, 2025
Malicious code in cascade_4kz3e_ruhct_indigo (npm)
- Aug 14, 2025
Malicious code in cascade_3hq0h_z8fyr_quasar (npm)
- Aug 14, 2025
Malicious code in cascade-zephyr-hri941-project (npm)
- Aug 14, 2025
Malicious code in cascade-zega1-tr62q-haven-project (npm)
- Aug 14, 2025
Malicious code in cascade-yearn-mhs812-project (npm)
- Aug 14, 2025
Malicious code in cascade-valley-uli453-project (npm)
- Aug 14, 2025
Malicious code in cascade-undertow-qes338-project (npm)
- Aug 14, 2025
Malicious code in cascade-thistle-bmg827-project (npm)
- Aug 14, 2025
Malicious code in cascade-te0bd-093di-kale-project (npm)
- Aug 14, 2025
Malicious code in cascade-star-cla341-project (npm)
- Aug 14, 2025
Malicious code in cascade-quasar-iwy892-project (npm)
- Aug 14, 2025
Malicious code in cascade-prairie-hlw298-project (npm)
- Aug 14, 2025
Malicious code in cascade-paradise-axa363-project (npm)
- Aug 14, 2025
Malicious code in cascade-moon-ufv550-project (npm)
- Aug 14, 2025
Malicious code in cascade-meadow-brg887-project (npm)
- Aug 14, 2025
Malicious code in cascade-l7vqn-5zp4o-iris-project (npm)
- Aug 14, 2025
Malicious code in cascade-kaleidoscope-mze501-project (npm)
- Aug 14, 2025
Malicious code in cascade-jasmine-pst615-project (npm)
- Aug 14, 2025
Malicious code in cascade-infinity-ahh628-project (npm)
- Aug 14, 2025
Malicious code in cascade-ezj8c-t4nrs-moonstone-project (npm)
- Aug 14, 2025
Malicious code in cascade-evergreen-ihk025-project (npm)
- Aug 14, 2025
Malicious code in cascade-everest-kem974-project (npm)
- Aug 14, 2025
Malicious code in cascade-eqpzg-cnlbb-echo-project (npm)
- Aug 14, 2025
Malicious code in cascade-dewdrop-yxe705-project (npm)
- Aug 14, 2025
Malicious code in cascade-albatross-hxk006-project (npm)
- Aug 14, 2025
Malicious code in cascade-62nar-p4wjf-frost-project (npm)
- Aug 14, 2025
Malicious code in cas-fee-demo (npm)
- Aug 14, 2025
Malicious code in carwow (npm)
- Aug 14, 2025
Malicious code in cartyweb (npm)
Page 5659 of 6,634