Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in catalogus (npm)
- Aug 14, 2025
Malicious code in catalano (npm)
- Aug 14, 2025
Malicious code in cat-yeti-lzv426-project (npm)
- Aug 14, 2025
Malicious code in cat-xerus-wui769-project (npm)
- Aug 14, 2025
Malicious code in cat-xerox-mjs874-project (npm)
- Aug 14, 2025
Malicious code in cat-wisp-gib542-project (npm)
- Aug 14, 2025
Malicious code in cat-whirlpool-mhx700-project (npm)
- Aug 14, 2025
Malicious code in cat-undertow-nlw175-project (npm)
- Aug 14, 2025
Malicious code in cat-sunset-moo712-project (npm)
- Aug 14, 2025
Malicious code in cat-quagmire-zok537-project (npm)
- Aug 14, 2025
Malicious code in cat-nautilus-aou981-project (npm)
- Aug 14, 2025
Malicious code in cat-gorge-doe917-project (npm)
- Aug 14, 2025
Malicious code in cat-etc-passwd (npm)
- Aug 14, 2025
Malicious code in cat-cherry-ehk154-project (npm)
- Aug 14, 2025
Malicious code in cat-arctic-vcq912-project (npm)
- Aug 14, 2025
Malicious code in castor-server-phoebe-remark (npm)
- Aug 14, 2025
Malicious code in castor-sagitta-rollup-rate-limiter (npm)
- Aug 14, 2025
Malicious code in castor-carpo-glaciology-comet (npm)
- Aug 14, 2025
Malicious code in castle-ziggurat-oomb (npm)
- Aug 14, 2025
Malicious code in castle-sierra-phsm (npm)
- Aug 14, 2025
Malicious code in castle-oak-7ygn (npm)
- Aug 14, 2025
Malicious code in castle-jalapeno-yfi1 (npm)
- Aug 14, 2025
Malicious code in castle-harbor-qg4r (npm)
- Aug 14, 2025
Malicious code in castle-foxtrot-gsgq (npm)
- Aug 14, 2025
Malicious code in castle-beetroot-fhwq (npm)
- Aug 14, 2025
Malicious code in castillor (npm)
- Aug 14, 2025
Malicious code in castdemo (npm)
- Aug 14, 2025
Malicious code in cassini-webdriver-manager-betelgeuse-fornax (npm)
- Aug 14, 2025
Malicious code in cassini-ursa-sass-loader-stream (npm)
- Aug 14, 2025
Malicious code in cassini-public-typeorm-lepton (npm)
- Aug 14, 2025
Malicious code in cassini-hydra-request-fetch (npm)
- Aug 14, 2025
Malicious code in cassback (npm)
- Aug 14, 2025
Malicious code in casper-runner (npm)
- Aug 14, 2025
Malicious code in casknevgxulpodjm (npm)
- Aug 14, 2025
Malicious code in casino2025 (npm)
- Aug 14, 2025
Malicious code in cashup (npm)
- Aug 14, 2025
Malicious code in cashpad (npm)
- Aug 14, 2025
Malicious code in cashfree-pg-koa-app (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-yur (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-www (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-ron (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-jbp (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-fft (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-erp (npm)
- Aug 14, 2025
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-btc (npm)
- Aug 14, 2025
Malicious code in caseum (npm)
- Aug 14, 2025
Malicious code in caseblok (npm)
- Aug 14, 2025
Malicious code in case-supermodels (npm)
- Aug 14, 2025
Malicious code in cascade_x7bno_57b1b_daybreak (npm)
- Aug 14, 2025
Malicious code in cascade_qajvx_qv3p9_harmony (npm)
Page 6088 of 7,293