Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in control-cdu (npm)
1 compromised version
- Jun 25, 2024
Malicious code in consul-nspaces (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in console3-dropdown (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in console-webapp (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in consent-page (npm)
1 compromised version
- Jun 25, 2024
Malicious code in consensys-v2 (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in config-storages (npm)
1 compromised version
- Jun 25, 2024
Malicious code in completelymadeupneedtotestsomething (npm)
1 compromised version
- Jun 25, 2024
Malicious code in compassrnsampleapp (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in commons-skin (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in common-dep-target (npm)
1 compromised version
- Jun 25, 2024
Malicious code in commodities (npm)
1 compromised version
- Jun 25, 2024
Malicious code in combinezone (npm)
1 compromised version
- Jun 25, 2024
Malicious code in com.example.show-toast.req (npm)
1 compromised version
- Jun 25, 2024
Malicious code in colors-devs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in code-versions (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in code-of-daily-modern-wordfare (npm)
1 compromised version
- Jun 25, 2024
Malicious code in code-caches (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cocaine-bear-full-movies-online-free-at-home-on-123moviesed7 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cocaine-bear-full-movies-online-free-at-home-on-123movies (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cndpjs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in clpp (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in cleantalk-spam-protect (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in citi-gcg-173875 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in citi-common-ui (npm)
1 compromised version
- Jun 25, 2024
Malicious code in circle-flags (npm)
1 compromised version
- Jun 25, 2024
Malicious code in chiragartjs-lib (npm)
1 compromised version
- Jun 25, 2024
Malicious code in chasqui (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in chartasasad2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in chart_type_multi_monitor (npm)
1 compromised version
- Jun 25, 2024
Malicious code in chards-script (npm)
1 compromised version
- Jun 25, 2024
Malicious code in chair-client (npm)
1 compromised version
- Jun 25, 2024
Malicious code in centuri (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cdnpjs (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in cd-package-lib (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in ccp-user-components (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ccp-login-url-helper (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ccmedi (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ccl-vifp-lookup-responsive (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ccl-vifp-lookup (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ccl-styles-2016 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ccl-component-resources (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in cc-libraries-js (npm)
1 compromised version
- Jun 25, 2024
Malicious code in catalog-container (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-working-2023-zvafgwer-isa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-working-2023-vajkiuea-kla (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-working-2023-plaksjdh-lim (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-working-2023-oiuyasew-upa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-working-2023-maklqowe-mza (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-working-2023-lkapoiaw-uno (npm)
1 compromised version
Page 6714 of 7,293