Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in cello-auto-register (npm)
- Aug 14, 2025
Malicious code in celestial-k4cf9-ew10m-quill-project (npm)
- Aug 14, 2025
Malicious code in celeste-yaml-aurora-jest (npm)
- Aug 14, 2025
Malicious code in celeste-testcafe-postgres-unuk (npm)
- Aug 14, 2025
Malicious code in celeste-radiant-yaml-command (npm)
- Aug 14, 2025
Malicious code in celeste-pm2-deimos-toml (npm)
- Aug 14, 2025
Malicious code in celeste-janus-biosignature-radiometric (npm)
- Aug 14, 2025
Malicious code in celeste-geoarchaeology-venus-dotenv (npm)
- Aug 14, 2025
Malicious code in cedrus-example-loader (npm)
- Aug 14, 2025
Malicious code in cecscope (npm)
- Aug 14, 2025
Malicious code in ce3r4 (npm)
- Aug 14, 2025
Malicious code in ce-market-insights-ui (npm)
- Aug 14, 2025
Malicious code in cdt-core (npm)
- Aug 14, 2025
Malicious code in cdrd (npm)
- Aug 14, 2025
Malicious code in cdo-apollo-server (npm)
- Aug 14, 2025
Malicious code in cdk-integ-tools (npm)
- Aug 14, 2025
Malicious code in cdd-vault (npm)
- Aug 14, 2025
Malicious code in cdcoop (npm)
- Aug 14, 2025
Malicious code in cdc-indicator (npm)
- Aug 14, 2025
Malicious code in ccymysql (npm)
- Aug 14, 2025
Malicious code in ccxte (npm)
- Aug 14, 2025
Malicious code in ccw2q (npm)
- Aug 14, 2025
Malicious code in ccuuli (npm)
- Aug 14, 2025
Malicious code in ccpawa (npm)
- Aug 14, 2025
Malicious code in ccpa-jurisdiction-sdk (npm)
- Aug 14, 2025
Malicious code in ccmarker (npm)
- Aug 14, 2025
Malicious code in cchappell (npm)
- Aug 14, 2025
Malicious code in cccisd-table (npm)
- Aug 14, 2025
Malicious code in cc2 (npm)
- Aug 14, 2025
Malicious code in cc-reporting (npm)
- Aug 14, 2025
Malicious code in cc-model-sql (npm)
- Aug 14, 2025
Malicious code in cbjourney (npm)
- Aug 14, 2025
Malicious code in cbg-log (npm)
- Aug 14, 2025
Malicious code in cbfour (npm)
- Aug 14, 2025
Malicious code in cb-serverless-plugins (npm)
- Aug 14, 2025
Malicious code in cb-iva-react-web-ui (npm)
- Aug 14, 2025
Malicious code in cb-components (npm)
- Aug 14, 2025
Malicious code in cavewars (npm)
- Aug 14, 2025
Malicious code in cavalry-logger (npm)
- Aug 14, 2025
Malicious code in cattoys (npm)
- Aug 14, 2025
Malicious code in catsear (npm)
- Aug 14, 2025
Malicious code in catsdogs (npm)
- Aug 14, 2025
Malicious code in catrecord (npm)
- Aug 14, 2025
Malicious code in catlnmp (npm)
- Aug 14, 2025
Malicious code in caterpillar-example (npm)
- Aug 14, 2025
Malicious code in CategoryJS (npm)
- Aug 14, 2025
Malicious code in categorize-files (npm)
- Aug 14, 2025
Malicious code in catech (npm)
- Aug 14, 2025
Malicious code in catch-secure-user-benchmark-scale (npm)
- Aug 14, 2025
Malicious code in catbox-sqlserver (npm)
Page 6087 of 7,293