Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Aug 14, 2025
Malicious code in codeval (npm)
- Aug 14, 2025
Malicious code in codesweat (npm)
- Aug 14, 2025
Malicious code in codercms (npm)
- Aug 14, 2025
Malicious code in codepipeline (npm)
- Aug 14, 2025
Malicious code in codens-auth (npm)
- Aug 14, 2025
Malicious code in codemedo (npm)
- Aug 14, 2025
Malicious code in codegennativecomponent (npm)
- Aug 14, 2025
Malicious code in codeevent (npm)
- Aug 14, 2025
Malicious code in codedive (npm)
- Aug 14, 2025
Malicious code in coded_errors (npm)
- Aug 14, 2025
Malicious code in code-file-decompress-decompress-byte (npm)
- Aug 14, 2025
Malicious code in code-cloud-zeta-cold-tau (npm)
- Aug 14, 2025
Malicious code in code-book-thread-warn-load (npm)
- Aug 14, 2025
Malicious code in codder (npm)
- Aug 14, 2025
Malicious code in cocobe (npm)
- Aug 14, 2025
Malicious code in cockatoo (npm)
- Aug 14, 2025
Malicious code in cocha-logger-services (npm)
- Aug 14, 2025
Malicious code in cobrebem (npm)
- Aug 14, 2025
Malicious code in cobmind (npm)
- Aug 14, 2025
Malicious code in coalesce-utils (npm)
- Aug 14, 2025
Malicious code in coalesce-moltin (npm)
- Aug 14, 2025
Malicious code in coalesce-magento (npm)
- Aug 14, 2025
Malicious code in coalesce-generic (npm)
- Aug 14, 2025
Malicious code in coalesce-core (npm)
- Aug 14, 2025
Malicious code in coagulate (npm)
- Aug 14, 2025
Malicious code in coachmeup (npm)
- Aug 14, 2025
Malicious code in cnffjbeq (npm)
- Aug 14, 2025
Malicious code in cneural (npm)
- Aug 14, 2025
Malicious code in cmskell (npm)
- Aug 14, 2025
Malicious code in cms-web (npm)
- Aug 14, 2025
Malicious code in cmomander (npm)
- Aug 14, 2025
Malicious code in cmiskit (npm)
- Aug 14, 2025
Malicious code in cmg-web-modules (npm)
- Aug 14, 2025
Malicious code in cmf.mes.sampling (npm)
- Aug 14, 2025
Malicious code in cmf.mes.recipe (npm)
- Aug 14, 2025
Malicious code in cmf.mes.material (npm)
- Aug 14, 2025
Malicious code in cmf.mes.mapping (npm)
- Aug 14, 2025
Malicious code in cmf.mes.maintenance (npm)
- Aug 14, 2025
Malicious code in cmf.mes.examples (npm)
- Aug 14, 2025
Malicious code in cmf.mes.datacollection (npm)
- Aug 14, 2025
Malicious code in cmf.mes.business.controls (npm)
- Aug 14, 2025
Malicious code in cmf.mes (npm)
- Aug 14, 2025
Malicious code in cmbalance (npm)
- Aug 14, 2025
Malicious code in cmantix (npm)
- Aug 14, 2025
Malicious code in cmanes (npm)
- Aug 14, 2025
Malicious code in cm-npm (npm)
- Aug 14, 2025
Malicious code in cm-materialjs (npm)
- Aug 14, 2025
Malicious code in cm-graphjs (npm)
- Aug 14, 2025
Malicious code in cm-api (npm)
- Aug 14, 2025
Malicious code in cm-algorithmjs (npm)
Page 6095 of 7,312