Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in chat-api1 (npm)
- Aug 14, 2025
Malicious code in chasteyes (npm)
- Aug 14, 2025
Malicious code in charrot (npm)
- Aug 14, 2025
Malicious code in charon-resolvers-bootes-lyra (npm)
- Aug 14, 2025
Malicious code in charon-npm-webpack-venus (npm)
- Aug 14, 2025
Malicious code in charon-enif-virgo-comet (npm)
- Aug 14, 2025
Malicious code in charon-blitz-socketio-nightwatch (npm)
- Aug 14, 2025
Malicious code in charmbox (npm)
- Aug 14, 2025
Malicious code in charlie-zym-project (npm)
- Aug 14, 2025
Malicious code in charlie-zulu-ugli-xuoal (npm)
- Aug 14, 2025
Malicious code in charlie-zulu-mowi (npm)
- Aug 14, 2025
Malicious code in charlie-zulu-jpkc (npm)
- Aug 14, 2025
Malicious code in charlie-ysd-project (npm)
- Aug 14, 2025
Malicious code in charlie-yankee-xmnd (npm)
- Aug 14, 2025
Malicious code in charlie-yankee-papa-dhtea (npm)
- Aug 14, 2025
Malicious code in charlie-y1q-project (npm)
- Aug 14, 2025
Malicious code in charlie-xy4-project (npm)
- Aug 14, 2025
Malicious code in charlie-xray-ivjk (npm)
- Aug 14, 2025
Malicious code in charlie-walnut-k9w1 (npm)
- Aug 14, 2025
Malicious code in charlie-vanilla-kcus (npm)
- Aug 14, 2025
Malicious code in charlie-vanilla-fdoy (npm)
- Aug 14, 2025
Malicious code in charlie-ugli-umzw (npm)
- Aug 14, 2025
Malicious code in charlie-u4y-project (npm)
- Aug 14, 2025
Malicious code in charlie-tango-lvoh (npm)
- Aug 14, 2025
Malicious code in charlie-tango-lima-mvztx (npm)
- Aug 14, 2025
Malicious code in charlie-tango-insn (npm)
- Aug 14, 2025
Malicious code in charlie-tango-emde (npm)
- Aug 14, 2025
Malicious code in charlie-strawberry-edzc (npm)
- Aug 14, 2025
Malicious code in charlie-quince-echo-pidtk (npm)
- Aug 14, 2025
Malicious code in charlie-quebec-mike-hsnpv (npm)
- Aug 14, 2025
Malicious code in charlie-qrj-project (npm)
- Aug 14, 2025
Malicious code in charlie-ppy-project (npm)
- Aug 14, 2025
Malicious code in charlie-p9x-project (npm)
- Aug 14, 2025
Malicious code in charlie-p1m-project (npm)
- Aug 14, 2025
Malicious code in charlie-orange-rtwz (npm)
- Aug 14, 2025
Malicious code in charlie-orange-novf (npm)
- Aug 14, 2025
Malicious code in charlie-november-alpha-zvrry (npm)
- Aug 14, 2025
Malicious code in charlie-mike-victor-taetl (npm)
- Aug 14, 2025
Malicious code in charlie-mike-alpha-mvvyr (npm)
- Aug 14, 2025
Malicious code in charlie-lby-project (npm)
- Aug 14, 2025
Malicious code in charlie-l49-project (npm)
- Aug 14, 2025
Malicious code in charlie-kiwi-ldve (npm)
- Aug 14, 2025
Malicious code in charlie-kiwi-camx (npm)
- Aug 14, 2025
Malicious code in charlie-kilo-oddi (npm)
- Aug 14, 2025
Malicious code in charlie-jus-project (npm)
- Aug 14, 2025
Malicious code in charlie-india-fmij (npm)
- Aug 14, 2025
Malicious code in charlie-hr8-project (npm)
- Aug 14, 2025
Malicious code in charlie-hotel-mango-kkity (npm)
- Aug 14, 2025
Malicious code in charlie-hotel-frip (npm)
- Aug 14, 2025
Malicious code in charlie-honeydew-grape-aqviy (npm)
Page 6084 of 7,293