Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in chulapi (npm)
- Aug 14, 2025
Malicious code in chucklee (npm)
- Aug 14, 2025
Malicious code in chroop (npm)
- Aug 14, 2025
Malicious code in chronosgl (npm)
- Aug 14, 2025
Malicious code in chromezmc (npm)
- Aug 14, 2025
Malicious code in chromeless-remotechrome-servie (npm)
- Aug 14, 2025
Malicious code in chromedriver-websockets-altair-superagent (npm)
- Aug 14, 2025
Malicious code in chromedriver-metalsmith-arcturus-stop (npm)
- Aug 14, 2025
Malicious code in chromedriver-lint-staged-acamar-luminescence (npm)
- Aug 14, 2025
Malicious code in chromedriver-gacrux-neutronstar-backend (npm)
- Aug 14, 2025
Malicious code in chromedriver-acamar-html-webpack-plugin-delphinus (npm)
- Aug 14, 2025
Malicious code in chrodo (npm)
- Aug 14, 2025
Malicious code in chqshn (npm)
- Aug 14, 2025
Malicious code in chpokk (npm)
- Aug 14, 2025
Malicious code in chordplay (npm)
- Aug 14, 2025
Malicious code in cholera (npm)
- Aug 14, 2025
Malicious code in choad (npm)
- Aug 14, 2025
Malicious code in chlenix (npm)
- Aug 14, 2025
Malicious code in chlak (npm)
- Aug 14, 2025
Malicious code in chkyrslf (npm)
- Aug 14, 2025
Malicious code in chkspeed-67634893 (npm)
- Aug 14, 2025
Malicious code in chipins (npm)
- Aug 14, 2025
Malicious code in chiper (npm)
- Aug 14, 2025
Malicious code in chinachu (npm)
- Aug 14, 2025
Malicious code in chinabook (npm)
- Aug 14, 2025
Malicious code in chimera-dom (npm)
- Aug 14, 2025
Malicious code in chilis (npm)
- Aug 14, 2025
Malicious code in childprocess-tracker (npm)
- Aug 14, 2025
Malicious code in child-process-rigel-soap-comet (npm)
- Aug 14, 2025
Malicious code in child-process-asthenosphere-callisto-eventhoriz (npm)
- Aug 14, 2025
Malicious code in child-process-achernar-archaeogenetics-hapi (npm)
- Aug 14, 2025
Malicious code in chikusho (npm)
- Aug 14, 2025
Malicious code in chiken (npm)
- Aug 14, 2025
Malicious code in chialab-highlightable (npm)
- Aug 14, 2025
Malicious code in chi-old-encrypt-grep-delta (npm)
- Aug 14, 2025
Malicious code in chi-notify-info-theta-decode (npm)
- Aug 14, 2025
Malicious code in chexxwars (npm)
- Aug 14, 2025
Malicious code in chestlink (npm)
- Aug 14, 2025
Malicious code in chessnut (npm)
- Aug 14, 2025
Malicious code in chessnet (npm)
- Aug 14, 2025
Malicious code in chesse (npm)
- Aug 14, 2025
Malicious code in cherry-zenith-p6qf (npm)
- Aug 14, 2025
Malicious code in cherry-yiu-project (npm)
- Aug 14, 2025
Malicious code in cherry-yellow-zvf108-project (npm)
- Aug 14, 2025
Malicious code in cherry-xigua-kiwi-fgrcc (npm)
- Aug 14, 2025
Malicious code in cherry-xigua-jxao (npm)
- Aug 14, 2025
Malicious code in cherry-watermelon-yankee-flaox (npm)
- Aug 14, 2025
Malicious code in cherry-vve-project (npm)
- Aug 14, 2025
Malicious code in cherry-void-4nca (npm)
- Aug 14, 2025
Malicious code in cherry-vista-vuo979-project (npm)
Page 6081 of 7,293