Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in coralogix-azure-serverless (npm)
- Aug 14, 2025
Malicious code in coral_wnpul_4d26n_whirlwind (npm)
- Aug 14, 2025
Malicious code in coral_tl3vp_kud0s_yosemite (npm)
- Aug 14, 2025
Malicious code in coral_rvbon_jrbf7_fern (npm)
- Aug 14, 2025
Malicious code in coral-yeti-wvi805-project (npm)
- Aug 14, 2025
Malicious code in coral-yak-kgy897-project (npm)
- Aug 14, 2025
Malicious code in coral-violet-cjh501-project (npm)
- Aug 14, 2025
Malicious code in coral-savanna-rbt648-project (npm)
- Aug 14, 2025
Malicious code in coral-qun2y-frgjo-yeti-project (npm)
- Aug 14, 2025
Malicious code in coral-quill-tom161-project (npm)
- Aug 14, 2025
Malicious code in coral-quagmire-axk584-project (npm)
- Aug 14, 2025
Malicious code in coral-lcph3-fkdfa-amethyst-project (npm)
- Aug 14, 2025
Malicious code in coral-lagoon-qzq948-project (npm)
- Aug 14, 2025
Malicious code in coral-kekg4-0qtsz-star-project (npm)
- Aug 14, 2025
Malicious code in coral-everest-ebo861-project (npm)
- Aug 14, 2025
Malicious code in coral-0xfyr-p928y-jade-project (npm)
- Aug 14, 2025
Malicious code in copyleaks-plagiarism-checker (npm)
- Aug 14, 2025
Malicious code in copyfish-npm-2-8-5 (npm)
- Aug 14, 2025
Malicious code in copyboard (npm)
- Aug 14, 2025
Malicious code in copland (npm)
- Aug 14, 2025
Malicious code in copass (npm)
- Aug 14, 2025
Malicious code in cooni-expo (npm)
- Aug 14, 2025
Malicious code in coolpos (npm)
- Aug 14, 2025
Malicious code in cool-testing-7-9-2016 (npm)
- Aug 14, 2025
Malicious code in cookie-police (npm)
- Aug 14, 2025
Malicious code in cookie-loggers (npm)
- Aug 14, 2025
Malicious code in cookease (npm)
- Aug 14, 2025
Malicious code in conwayhs (npm)
- Aug 14, 2025
Malicious code in convolver (npm)
- Aug 14, 2025
Malicious code in convict-indus-loopback-ariel (npm)
- Aug 14, 2025
Malicious code in convict-centaurus-cosmology-odin (npm)
- Aug 14, 2025
Malicious code in convict-borealis-socketio-kardashevscale (npm)
- Aug 14, 2025
Malicious code in convict-astrometry-got-multiverse (npm)
- Aug 14, 2025
Malicious code in convertx (npm)
- Aug 14, 2025
Malicious code in convertom (npm)
- Aug 14, 2025
Malicious code in convertly-components (npm)
- Aug 14, 2025
Malicious code in converted (npm)
- Aug 14, 2025
Malicious code in conversa (npm)
- Aug 14, 2025
Malicious code in controlm (npm)
- Aug 14, 2025
Malicious code in contracts-plugins (npm)
- Aug 14, 2025
Malicious code in contohkey (npm)
- Aug 14, 2025
Malicious code in continent (npm)
- Aug 14, 2025
Malicious code in context-validators (npm)
- Aug 14, 2025
Malicious code in context-log (npm)
- Aug 14, 2025
Malicious code in contentful-build-bot (npm)
- Aug 14, 2025
Malicious code in contentchef-management-js-client (npm)
- Aug 14, 2025
Malicious code in content-tags (npm)
- Aug 14, 2025
Malicious code in content-cloud-validator-tool (npm)
- Aug 14, 2025
Malicious code in content-chef-components (npm)
- Aug 14, 2025
Malicious code in contee (npm)
Page 6070 of 7,293