Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in car-iceberg-vf0g (npm)
- Aug 14, 2025
Malicious code in captcp (npm)
- Aug 14, 2025
Malicious code in captchait (npm)
- Aug 14, 2025
Malicious code in captchaad (npm)
- Aug 14, 2025
Malicious code in capsule-ui (npm)
- Aug 14, 2025
Malicious code in capsidea (npm)
- Aug 14, 2025
Malicious code in capops (npm)
- Aug 14, 2025
Malicious code in capistrano-ejson (npm)
- Aug 14, 2025
Malicious code in capistrano-borg (npm)
- Aug 14, 2025
Malicious code in capexdoc (npm)
- Aug 14, 2025
Malicious code in capella-virgo-nebula-acamar (npm)
- Aug 14, 2025
Malicious code in capella-lepton-mensa-phoebe (npm)
- Aug 14, 2025
Malicious code in capella-element-ui-loglevel-bootes (npm)
- Aug 14, 2025
Malicious code in capella-chromedriver-algol-postcss (npm)
- Aug 14, 2025
Malicious code in capella-aldebaran-semantic-release-hapi (npm)
- Aug 14, 2025
Malicious code in capchi (npm)
- Aug 14, 2025
Malicious code in canyon_pqkll_ehq4p_harmony (npm)
- Aug 14, 2025
Malicious code in canyon_3xggw_4wtld_crown (npm)
- Aug 14, 2025
Malicious code in canway (npm)
- Aug 14, 2025
Malicious code in canvasino (npm)
- Aug 14, 2025
Malicious code in canvasbars (npm)
- Aug 14, 2025
Malicious code in canvas-hikki (npm)
- Aug 14, 2025
Malicious code in cantynovi (npm)
- Aug 14, 2025
Malicious code in canopus-middleware-jsonp-slidev (npm)
- Aug 14, 2025
Malicious code in canopus-jest-ini-equinox (npm)
- Aug 14, 2025
Malicious code in canopus-cosmogenic-dysonswarm-elektra (npm)
- Aug 14, 2025
Malicious code in candycoin (npm)
- Aug 14, 2025
Malicious code in candra-nasicampur30-breki (npm)
- Aug 14, 2025
Malicious code in candra-lutis19-sukiwir (npm)
- Aug 14, 2025
Malicious code in candra-lodeh40-kuki (npm)
- Aug 14, 2025
Malicious code in candra-kupang76-sukiwir (npm)
- Aug 14, 2025
Malicious code in candra-kue79-breki (npm)
- Aug 14, 2025
Malicious code in candra-kue61-kuki (npm)
- Aug 14, 2025
Malicious code in candra-keripik96-kuki (npm)
- Aug 14, 2025
Malicious code in candra-kemplang83-kuki (npm)
- Aug 14, 2025
Malicious code in candra-getuk48-sukiwir (npm)
- Aug 14, 2025
Malicious code in candra-bakwan76-sukiwir (npm)
- Aug 14, 2025
Malicious code in candify (npm)
- Aug 14, 2025
Malicious code in candiate (npm)
- Aug 14, 2025
Malicious code in canciones (npm)
- Aug 14, 2025
Malicious code in cancione (npm)
- Aug 14, 2025
Malicious code in cancer (npm)
- Aug 14, 2025
Malicious code in canalplus-react-library (npm)
- Aug 14, 2025
Malicious code in camtest (npm)
- Aug 14, 2025
Malicious code in campbot (npm)
- Aug 14, 2025
Malicious code in cammy-web-analytics (npm)
- Aug 14, 2025
Malicious code in caminiojs (npm)
- Aug 14, 2025
Malicious code in cameoconfig (npm)
- Aug 14, 2025
Malicious code in camedia (npm)
- Aug 14, 2025
Malicious code in cameasy (npm)
Page 5661 of 6,634