Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,461 total · sorted newest first- Aug 14, 2025
Malicious code in cockatoo (npm)
- Aug 14, 2025
Malicious code in cocha-logger-services (npm)
- Aug 14, 2025
Malicious code in cobrebem (npm)
- Aug 14, 2025
Malicious code in cobmind (npm)
- Aug 14, 2025
Malicious code in coalesce-utils (npm)
- Aug 14, 2025
Malicious code in coalesce-moltin (npm)
- Aug 14, 2025
Malicious code in coalesce-magento (npm)
- Aug 14, 2025
Malicious code in coalesce-generic (npm)
- Aug 14, 2025
Malicious code in coalesce-core (npm)
- Aug 14, 2025
Malicious code in coagulate (npm)
- Aug 14, 2025
Malicious code in coachmeup (npm)
- Aug 14, 2025
Malicious code in cnffjbeq (npm)
- Aug 14, 2025
Malicious code in cneural (npm)
- Aug 14, 2025
Malicious code in cmskell (npm)
- Aug 14, 2025
Malicious code in cms-web (npm)
- Aug 14, 2025
Malicious code in cmomander (npm)
- Aug 14, 2025
Malicious code in cmiskit (npm)
- Aug 14, 2025
Malicious code in cmg-web-modules (npm)
- Aug 14, 2025
Malicious code in cmf.mes.sampling (npm)
- Aug 14, 2025
Malicious code in cmf.mes.recipe (npm)
- Aug 14, 2025
Malicious code in cmf.mes.material (npm)
- Aug 14, 2025
Malicious code in cmf.mes.mapping (npm)
- Aug 14, 2025
Malicious code in cmf.mes.maintenance (npm)
- Aug 14, 2025
Malicious code in cmf.mes.examples (npm)
- Aug 14, 2025
Malicious code in cmf.mes.datacollection (npm)
- Aug 14, 2025
Malicious code in cmf.mes.business.controls (npm)
- Aug 14, 2025
Malicious code in cmf.mes (npm)
- Aug 14, 2025
Malicious code in cmbalance (npm)
- Aug 14, 2025
Malicious code in cmantix (npm)
- Aug 14, 2025
Malicious code in cmanes (npm)
- Aug 14, 2025
Malicious code in cm-npm (npm)
- Aug 14, 2025
Malicious code in cm-materialjs (npm)
- Aug 14, 2025
Malicious code in cm-graphjs (npm)
- Aug 14, 2025
Malicious code in cm-api (npm)
- Aug 14, 2025
Malicious code in cm-algorithmjs (npm)
- Aug 14, 2025
Malicious code in clusterpoint-api-v4 (npm)
- Aug 14, 2025
Malicious code in cluster-xenobiology-inflation-mongodb (npm)
- Aug 14, 2025
Malicious code in cluster-transpile-java-simple-balance (npm)
- Aug 14, 2025
Malicious code in cluster-sudo-fast-info-iota (npm)
- Aug 14, 2025
Malicious code in cluster-registry (npm)
- Aug 14, 2025
Malicious code in cluster-publish-firebase-module (npm)
- Aug 14, 2025
Malicious code in cluster-petrology-thuban-protractor (npm)
- Aug 14, 2025
Malicious code in cluster-pegasus-cluster-geoarchaeology (npm)
- Aug 14, 2025
Malicious code in cluster-nextjs-html-webpack-plugin-scripts (npm)
- Aug 14, 2025
Malicious code in cluster-middleware-parcel-flare (npm)
- Aug 14, 2025
Malicious code in cluster-lithosphere-baryon-gammarayburst (npm)
- Aug 14, 2025
Malicious code in cluster-lightyear-grus-public (npm)
- Aug 14, 2025
Malicious code in cluster-entanglement-update-spectroscopy (npm)
- Aug 14, 2025
Malicious code in cluster-easy-sed-throw-cloud (npm)
- Aug 14, 2025
Malicious code in cluster-babel-apollo-cors (npm)
Page 6093 of 7,310