Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in chacas (npm)
- Aug 14, 2025
Malicious code in chabwork (npm)
- Aug 14, 2025
Malicious code in ch.post.sap.fototool (npm)
- Aug 14, 2025
Malicious code in ch-react-search (npm)
- Aug 14, 2025
Malicious code in ch-react-modal (npm)
- Aug 14, 2025
Malicious code in ch-react-menu (npm)
- Aug 14, 2025
Malicious code in ch-react-listselector (npm)
- Aug 14, 2025
Malicious code in ch-react-help (npm)
- Aug 14, 2025
Malicious code in ch-react-dropdown (npm)
- Aug 14, 2025
Malicious code in ch-react-avatar (npm)
- Aug 14, 2025
Malicious code in ch-react-actionmenu (npm)
- Aug 14, 2025
Malicious code in cgpngsqc (npm)
- Aug 14, 2025
Malicious code in cgplcrc (npm)
- Aug 14, 2025
Malicious code in cgmjasxzuliovnqk (npm)
- Aug 14, 2025
Malicious code in cggurb (npm)
- Aug 14, 2025
Malicious code in cgeqtowidauyhsjp (npm)
- Aug 14, 2025
Malicious code in cgdcbxd (npm)
- Aug 14, 2025
Malicious code in cfx-login-modal (npm)
- Aug 14, 2025
Malicious code in cftoxml (npm)
- Aug 14, 2025
Malicious code in cfscardlifecycleserv (npm)
- Aug 14, 2025
Malicious code in cfn2ts (npm)
- Aug 14, 2025
Malicious code in cflash (npm)
- Aug 14, 2025
Malicious code in cfinance (npm)
- Aug 14, 2025
Malicious code in cfer-toolkit (npm)
- Aug 14, 2025
Malicious code in cf-topic (npm)
- Aug 14, 2025
Malicious code in cf-menubar-pkg (npm)
- Aug 14, 2025
Malicious code in cexcel (npm)
- Aug 14, 2025
Malicious code in certica-mui-template (npm)
- Aug 14, 2025
Malicious code in ceres-luna-andromeda-envconfig (npm)
- Aug 14, 2025
Malicious code in ceres-capella-babel-commitlint (npm)
- Aug 14, 2025
Malicious code in cerebra (npm)
- Aug 14, 2025
Malicious code in cerealfan (npm)
- Aug 14, 2025
Malicious code in ceproject (npm)
- Aug 14, 2025
Malicious code in centralplace (npm)
- Aug 14, 2025
Malicious code in centersvg (npm)
- Aug 14, 2025
Malicious code in centering (npm)
- Aug 14, 2025
Malicious code in centered-cover-background (npm)
- Aug 14, 2025
Malicious code in centered (npm)
- Aug 14, 2025
Malicious code in center-box (npm)
- Aug 14, 2025
Malicious code in centaurus-spica-fermiparadox-odin (npm)
- Aug 14, 2025
Malicious code in centaurus-release-it-jsonp-meteor (npm)
- Aug 14, 2025
Malicious code in centauri-pegasus-eslint-config-commitlint (npm)
- Aug 14, 2025
Malicious code in centauri-nebula-steganography-meteor (npm)
- Aug 14, 2025
Malicious code in centauri-magnetosphere-virgo-pipe (npm)
- Aug 14, 2025
Malicious code in centauri-hydra-node-config-avior (npm)
- Aug 14, 2025
Malicious code in centauri-eris-leda-remark (npm)
- Aug 14, 2025
Malicious code in centauri-ariel-shelljs-iota (npm)
- Aug 14, 2025
Malicious code in censorify_jinho82 (npm)
- Aug 14, 2025
Malicious code in cemerety (npm)
- Aug 14, 2025
Malicious code in cello-ini-parser (npm)
Page 6086 of 7,293