Skip to content

Topic

Malicious packages

Hostile code published to public package registries such as npm or PyPI, usually disguised as a legitimate dependency, a new version of one, or a misspelling of one.

Current clusters