Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malicious code in cscount-vue3 (npm)
- Feb 3, 2025
Malicious code in cschokidar-next (npm)
- Feb 3, 2025
Malicious code in cscchalk (npm)
- Feb 3, 2025
Malicious code in csbvue-unplugin (npm)
- Feb 3, 2025
Malicious code in csachalk-next (npm)
- Feb 3, 2025
Malicious code in cs-templates (npm)
- Feb 3, 2025
Malicious code in cs-quill (npm)
- Feb 3, 2025
Malicious code in cs-player (npm)
- Feb 3, 2025
Malicious code in cs-magnifier (npm)
- Feb 3, 2025
Malicious code in cs-icons-vue3 (npm)
- Feb 3, 2025
Malicious code in cs-croppers (npm)
- Feb 3, 2025
Malicious code in cs-count (npm)
- Feb 3, 2025
Malicious code in cs-contextmenu (npm)
- Feb 3, 2025
Malicious code in achokidar-next (npm)
- Feb 3, 2025
Malware in cs-contextmenu
1 compromised version
- Feb 3, 2025
Malware in csachalk-next
1 compromised version
- Feb 3, 2025
Malware in cs-player
1 compromised version
- Feb 3, 2025
Malware in cscropper-vue32
1 compromised version
- Feb 3, 2025
Malware in csmagnifier-vue3
1 compromised version
- Feb 3, 2025
Malware in cs-icons-vue3
1 compromised version
- Feb 3, 2025
Malware in cscropper-vue3
1 compromised version
- Feb 3, 2025
Malware in cs-count
1 compromised version
- Feb 3, 2025
Malware in cs-templates
1 compromised version
- Feb 3, 2025
Malware in cs-magnifier
1 compromised version
- Feb 3, 2025
Malware in cscvue-unplugin
1 compromised version
- Feb 3, 2025
Malware in achalk-next
1 compromised version
- Feb 3, 2025
Malware in csbchalk-next
1 compromised version
- Feb 3, 2025
Malware in csquill-vue3
1 compromised version
- Feb 3, 2025
Malware in cscchokidar-next
1 compromised version
- Feb 3, 2025
Malware in cschalk-next
1 compromised version
- Feb 3, 2025
Malware in cs-croppers
1 compromised version
- Feb 3, 2025
Malware in cschalk
1 compromised version
- Feb 3, 2025
Malware in cschokidar-next
1 compromised version
- Feb 3, 2025
Malware in vue-plugin-rely-cs
1 compromised version
- Feb 3, 2025
Malware in cscount-vue3
1 compromised version
- Feb 3, 2025
Malware in csvue-unplugin
1 compromised version
- Feb 3, 2025
Malware in cscchalk
1 compromised version
- Feb 3, 2025
Malware in cs-quill
1 compromised version
- Feb 3, 2025
Malware in achokidar-next
1 compromised version
- Feb 3, 2025
Malware in csbvue-unplugin
1 compromised version
- Feb 3, 2025
Malicious code in vue-plugin-relyc (npm)
- Feb 3, 2025
Malicious code in cs-templates-vue3 (npm)
- Feb 3, 2025
Malicious code in cs-icons (npm)
- Feb 3, 2025
Malware in cs-icons
1 compromised version
- Feb 3, 2025
Malware in vue-plugin-relyc
1 compromised version
- Feb 3, 2025
Malware in cs-templates-vue3
1 compromised version
- Feb 3, 2025
Malicious code in discordjs-webclients (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in discordjs-self-v22.3 (npm)
1 compromised version
- Feb 3, 2025
Malware in discordjs-self-v22.3
1 compromised version
- Feb 3, 2025
Malware in discordjs-webclients
1 compromised version
Page 5993 of 6,647