Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in cascade_q7kfh_i8il6_mystic (npm)
- Aug 14, 2025
Malicious code in cascade_phnht_ng8w0_opaline (npm)
- Aug 14, 2025
Malicious code in cascade_lcth4_b245i_antelope (npm)
- Aug 14, 2025
Malicious code in cascade_hd4kj_z4dhx_zephyr (npm)
- Aug 14, 2025
Malicious code in cascade_b3hwp_vtgle_illusion (npm)
- Aug 14, 2025
Malicious code in cascade_6wd35_l27dk_xylophone (npm)
- Aug 14, 2025
Malicious code in cascade_51cts_vwepo_ivy (npm)
- Aug 14, 2025
Malicious code in cascade_4kz3e_ruhct_indigo (npm)
- Aug 14, 2025
Malicious code in cascade_3hq0h_z8fyr_quasar (npm)
- Aug 14, 2025
Malicious code in cascade-zephyr-hri941-project (npm)
- Aug 14, 2025
Malicious code in cascade-zega1-tr62q-haven-project (npm)
- Aug 14, 2025
Malicious code in cascade-yearn-mhs812-project (npm)
- Aug 14, 2025
Malicious code in cascade-valley-uli453-project (npm)
- Aug 14, 2025
Malicious code in cascade-undertow-qes338-project (npm)
- Aug 14, 2025
Malicious code in cascade-thistle-bmg827-project (npm)
- Aug 14, 2025
Malicious code in cascade-te0bd-093di-kale-project (npm)
- Aug 14, 2025
Malicious code in cascade-star-cla341-project (npm)
- Aug 14, 2025
Malicious code in cascade-quasar-iwy892-project (npm)
- Aug 14, 2025
Malicious code in cascade-prairie-hlw298-project (npm)
- Aug 14, 2025
Malicious code in cascade-paradise-axa363-project (npm)
- Aug 14, 2025
Malicious code in cascade-moon-ufv550-project (npm)
- Aug 14, 2025
Malicious code in cascade-meadow-brg887-project (npm)
- Aug 14, 2025
Malicious code in cascade-l7vqn-5zp4o-iris-project (npm)
- Aug 14, 2025
Malicious code in cascade-kaleidoscope-mze501-project (npm)
- Aug 14, 2025
Malicious code in cascade-jasmine-pst615-project (npm)
- Aug 14, 2025
Malicious code in cascade-infinity-ahh628-project (npm)
- Aug 14, 2025
Malicious code in cascade-ezj8c-t4nrs-moonstone-project (npm)
- Aug 14, 2025
Malicious code in cascade-evergreen-ihk025-project (npm)
- Aug 14, 2025
Malicious code in cascade-everest-kem974-project (npm)
- Aug 14, 2025
Malicious code in cascade-eqpzg-cnlbb-echo-project (npm)
- Aug 14, 2025
Malicious code in cascade-dewdrop-yxe705-project (npm)
- Aug 14, 2025
Malicious code in cascade-albatross-hxk006-project (npm)
- Aug 14, 2025
Malicious code in cascade-62nar-p4wjf-frost-project (npm)
- Aug 14, 2025
Malicious code in cas-fee-demo (npm)
- Aug 14, 2025
Malicious code in carwow (npm)
- Aug 14, 2025
Malicious code in cartyweb (npm)
- Aug 14, 2025
Malicious code in cartruck (npm)
- Aug 14, 2025
Malicious code in cartridge-gulpicon (npm)
- Aug 14, 2025
Malicious code in carto-lib-js (npm)
- Aug 14, 2025
Malicious code in cartele (npm)
- Aug 14, 2025
Malicious code in cartapush (npm)
- Aug 14, 2025
Malicious code in carspeed (npm)
- Aug 14, 2025
Malicious code in carrot-xerophyte-jhu6 (npm)
- Aug 14, 2025
Malicious code in carrot-uniform-v6ee (npm)
- Aug 14, 2025
Malicious code in carrot-ugli-jjwq (npm)
- Aug 14, 2025
Malicious code in carrot-orbit-wzn5 (npm)
- Aug 14, 2025
Malicious code in carrot-echo-k6n6 (npm)
- Aug 14, 2025
Malicious code in carpo-nodejs-react-bootstrap-hyperion (npm)
- Aug 14, 2025
Malicious code in carpo-deneb-supercluster-zenobia (npm)
- Aug 14, 2025
Malicious code in carolus (npm)
Page 6089 of 7,293