Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in com.apple.unityplugin.arcade.fairplay (npm)
- Aug 14, 2025
Malicious code in com.apple.unityplugin.arcade.cloudsaves (npm)
- Aug 14, 2025
Malicious code in com.apple.unityplugin.arcade.cloudkit (npm)
- Aug 14, 2025
Malicious code in com.apple.unityplugin.accessibility (npm)
- Aug 14, 2025
Malicious code in columnar (npm)
- Aug 14, 2025
Malicious code in colugo (npm)
- Aug 14, 2025
Malicious code in colro-name (npm)
- Aug 14, 2025
Malicious code in colresizable-egis (npm)
- Aug 14, 2025
Malicious code in colour-string (npm)
- Aug 14, 2025
Malicious code in colour-name (npm)
- Aug 14, 2025
Malicious code in colorv (npm)
- Aug 14, 2025
Malicious code in colors-personaly (npm)
- Aug 14, 2025
Malicious code in colors-person (npm)
- Aug 14, 2025
Malicious code in colors-npm-pino-pretty-electron-builder (npm)
- Aug 14, 2025
Malicious code in colors-materialize-astrochemistry-figures (npm)
- Aug 14, 2025
Malicious code in colors-lyra-scripts-exobiology (npm)
- Aug 14, 2025
Malicious code in colors-lacerta-dotenv-safe-xenon (npm)
- Aug 14, 2025
Malicious code in colors-express-jwt-corvus (npm)
- Aug 14, 2025
Malicious code in colors-bootes-publish-magellan (npm)
- Aug 14, 2025
Malicious code in colors-blitz-quasar-australis (npm)
- Aug 14, 2025
Malicious code in colormo (npm)
- Aug 14, 2025
Malicious code in colorapp (npm)
- Aug 14, 2025
Malicious code in color-convert-conversions (npm)
- Aug 14, 2025
Malicious code in colomb (npm)
- Aug 14, 2025
Malicious code in colo-detect-paypal (npm)
- Aug 14, 2025
Malicious code in colne (npm)
- Aug 14, 2025
Malicious code in collection-bb-blocks (npm)
- Aug 14, 2025
Malicious code in collageer (npm)
- Aug 14, 2025
Malicious code in coldworld (npm)
- Aug 14, 2025
Malicious code in coldkey (npm)
- Aug 14, 2025
Malicious code in coldcat (npm)
- Aug 14, 2025
Malicious code in cold-short-phi-public-code (npm)
- Aug 14, 2025
Malicious code in cold-analyze-code-cat-process (npm)
- Aug 14, 2025
Malicious code in cokedeluxe (npm)
- Aug 14, 2025
Malicious code in coinstrng (npm)
- Aug 14, 2025
Malicious code in coinstrig (npm)
- Aug 14, 2025
Malicious code in coinstirng (npm)
- Aug 14, 2025
Malicious code in coinrider (npm)
- Aug 14, 2025
Malicious code in coinpayment (npm)
- Aug 14, 2025
Malicious code in coin-master-spins-for-free-2023-april-jdkk (npm)
- Aug 14, 2025
Malicious code in coin-master-free-spins-in-april-2023-jekdk (npm)
- Aug 14, 2025
Malicious code in cognicor (npm)
- Aug 14, 2025
Malicious code in cogler (npm)
- Aug 14, 2025
Malicious code in cogicapp (npm)
- Aug 14, 2025
Malicious code in Coflux (npm)
- Aug 14, 2025
Malicious code in coffescript (npm)
- Aug 14, 2025
Malicious code in coffe-script (npm)
- Aug 14, 2025
Malicious code in cofeescript (npm)
- Aug 14, 2025
Malicious code in cofee-script (npm)
- Aug 14, 2025
Malicious code in cofcof (npm)
Page 6075 of 7,293