Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in cloud-image (npm)
- Aug 14, 2025
Malicious code in cloud-honey-ccq360-project (npm)
- Aug 14, 2025
Malicious code in cloud-hill-lqn834-project (npm)
- Aug 14, 2025
Malicious code in cloud-giraffe-wry163-project (npm)
- Aug 14, 2025
Malicious code in cloud-falcon-zdv650-project (npm)
- Aug 14, 2025
Malicious code in cloud-emulate-dog-benchmark-module (npm)
- Aug 14, 2025
Malicious code in cloud-arctic-djz542-project (npm)
- Aug 14, 2025
Malicious code in cloud-active (npm)
- Aug 14, 2025
Malicious code in clothnote (npm)
- Aug 14, 2025
Malicious code in closure-es6 (npm)
1 compromised version
- Aug 14, 2025
Malicious code in clonnit (npm)
- Aug 14, 2025
Malicious code in cloejb (npm)
- Aug 14, 2025
Malicious code in clocam (npm)
- Aug 14, 2025
Malicious code in cloakmy (npm)
- Aug 14, 2025
Malicious code in cljsuit (npm)
- Aug 14, 2025
Malicious code in cljsrt (npm)
- Aug 14, 2025
Malicious code in cliques-console (npm)
- Aug 14, 2025
Malicious code in cliptwo (npm)
- Aug 14, 2025
Malicious code in clips-processor (npm)
- Aug 14, 2025
Malicious code in clippboard.js (npm)
- Aug 14, 2025
Malicious code in ClipJS (npm)
- Aug 14, 2025
Malicious code in clipboard-parse (npm)
- Aug 14, 2025
Malicious code in clip_settings (npm)
- Aug 14, 2025
Malicious code in clingsii (npm)
- Aug 14, 2025
Malicious code in climas (npm)
- Aug 14, 2025
Malicious code in cliff-zenith-nwy053-project (npm)
- Aug 14, 2025
Malicious code in cliff-yak-pes843-project (npm)
- Aug 14, 2025
Malicious code in cliff-utopia-hvw531-project (npm)
- Aug 14, 2025
Malicious code in cliff-rainbow-aej248-project (npm)
- Aug 14, 2025
Malicious code in cliff-lightning-dxr913-project (npm)
- Aug 14, 2025
Malicious code in cliff-fern-kgt853-project (npm)
- Aug 14, 2025
Malicious code in cliff-falcon-whl158-project (npm)
- Aug 14, 2025
Malicious code in cliff-blossom-ige915-project (npm)
- Aug 14, 2025
Malicious code in cliff-ant-yra155-project (npm)
- Aug 14, 2025
Malicious code in clientlibs (npm)
- Aug 14, 2025
Malicious code in client-hooks-eslint-es6 (npm)
- Aug 14, 2025
Malicious code in client-connector-socket.io (npm)
- Aug 14, 2025
Malicious code in clickredirect (npm)
- Aug 14, 2025
Malicious code in click-apps-library (npm)
- Aug 14, 2025
Malicious code in cli-theme (npm)
- Aug 14, 2025
Malicious code in cli-tachyon-speleology-phylogenetics (npm)
- Aug 14, 2025
Malicious code in cli-support (npm)
- Aug 14, 2025
Malicious code in cli-redshift-leda-publish (npm)
- Aug 14, 2025
Malicious code in cli-qa (npm)
- Aug 14, 2025
Malicious code in cli-plugin-script (npm)
- Aug 14, 2025
Malicious code in cli-plugin-ngrok (npm)
- Aug 14, 2025
Malicious code in cli-plugin-migrate (npm)
- Aug 14, 2025
Malicious code in cli-plugin-graphql (npm)
- Aug 14, 2025
Malicious code in cli-plugin-graphiql (npm)
- Aug 14, 2025
Malicious code in cli-jbook-2023-els (npm)
Page 6078 of 7,293