Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in cli-janus-norma-lightyear (npm)
- Aug 14, 2025
Malicious code in cli-ini-fetch-geckodriver (npm)
- Aug 14, 2025
Malicious code in cli-hydrogen (npm)
- Aug 14, 2025
Malicious code in cli-h2-test (npm)
- Aug 14, 2025
Malicious code in cli-form (npm)
- Aug 14, 2025
Malicious code in cli-cressida-tool-supercluster (npm)
- Aug 14, 2025
Malicious code in cli-configs (npm)
- Aug 14, 2025
Malicious code in cli-aether-superposition-blueshift (npm)
- Aug 14, 2025
Malicious code in clgskhbepwjdnkiy (npm)
- Aug 14, 2025
Malicious code in cleanzen (npm)
- Aug 14, 2025
Malicious code in cleanchat (npm)
- Aug 14, 2025
Malicious code in clean_sentence (npm)
- Aug 14, 2025
Malicious code in clean-blog (npm)
- Aug 14, 2025
Malicious code in class-zeta-sun-epsilon-log (npm)
- Aug 14, 2025
Malicious code in clasp-nuzzle-fot819-project (npm)
- Aug 14, 2025
Malicious code in clasker (npm)
- Aug 14, 2025
Malicious code in clasicos (npm)
- Aug 14, 2025
Malicious code in clashbot (npm)
- Aug 14, 2025
Malicious code in clarity-atoms (npm)
- Aug 14, 2025
Malicious code in claris-schemas (npm)
- Aug 14, 2025
Malicious code in clapton (npm)
- Aug 14, 2025
Malicious code in cladistics-tardigrade-blueshift-primatology (npm)
- Aug 14, 2025
Malicious code in cladistics-markdown-pdf-loop-transform (npm)
- Aug 14, 2025
Malicious code in cladistics-karma-procyon-eris (npm)
- Aug 14, 2025
Malicious code in cladistics-interstellarmedium-aether-perturbation (npm)
- Aug 14, 2025
Malicious code in ckvxgprsafzltedy (npm)
- Aug 14, 2025
Malicious code in ckeditor5-s3-upload (npm)
- Aug 14, 2025
Malicious code in cjvifzdwptumhqra (npm)
- Aug 14, 2025
Malicious code in cjvdel (npm)
- Aug 14, 2025
Malicious code in cjkbrzfawhsudito (npm)
- Aug 14, 2025
Malicious code in cjblog (npm)
- Aug 14, 2025
Malicious code in cj-tests-2fa (npm)
- Aug 14, 2025
Malicious code in cixpher (npm)
- Aug 14, 2025
Malicious code in civilians (npm)
- Aug 14, 2025
Malicious code in civgame (npm)
- Aug 14, 2025
Malicious code in cityfury (npm)
- Aug 14, 2025
Malicious code in citrusdb (npm)
- Aug 14, 2025
Malicious code in citrix-ui (npm)
- Aug 14, 2025
Malicious code in citra-nasisayur87-breki (npm)
- Aug 14, 2025
Malicious code in citra-naget33-breki (npm)
- Aug 14, 2025
Malicious code in citra-kue86-breki (npm)
- Aug 14, 2025
Malicious code in citra-ketoprak65-kuki (npm)
- Aug 14, 2025
Malicious code in citra-keraktelor42-breki (npm)
- Aug 14, 2025
Malicious code in citra-gulai40-kuki (npm)
- Aug 14, 2025
Malicious code in citra-gulai4-kuki (npm)
- Aug 14, 2025
Malicious code in citipark (npm)
- Aug 14, 2025
Malicious code in citadel_jxrki_cxqr5_island (npm)
- Aug 14, 2025
Malicious code in citadel_9ai8f_ntah7_velocity (npm)
- Aug 14, 2025
Malicious code in citadel_4c3v1_akoop_night (npm)
- Aug 14, 2025
Malicious code in citadel_2k7xa_v5gjt_rose (npm)
Page 6079 of 7,293