Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)
- Nov 13, 2025
Malicious code in nuxtjs-enceladus-miranda-jasmine (npm)
- Nov 13, 2025
Malicious code in nucleosynthesis-standard-pulsar-non-blocking (npm)
- Nov 13, 2025
Malicious code in nucleosynthesis-neptunology-spica-stratosphere (npm)
- Nov 13, 2025
Malicious code in nucleosynthesis-backend-local-foundation (npm)
- Nov 13, 2025
Malicious code in nu-interpret-container-grep-bad (npm)
- Nov 13, 2025
Malicious code in nu-grid-import-chi-assert (npm)
- Nov 13, 2025
Malicious code in nu-double-import-theta-old (npm)
- Nov 13, 2025
Malicious code in npm-publish-cross-env-jest (npm)
- Nov 13, 2025
Malicious code in npm-global-sublimation-augmentedreality (npm)
- Nov 13, 2025
Malicious code in npm-equinox-bootstrap-baryon (npm)
- Nov 13, 2025
Malicious code in nova-virgo-jasmine-redshift (npm)
- Nov 13, 2025
Malicious code in nova-singularitarianism-warp-redshift (npm)
- Nov 13, 2025
Malicious code in nova-sagitta-pegasus-hermes (npm)
- Nov 13, 2025
Malicious code in nova-relay-cosmogenic-taurus (npm)
- Nov 13, 2025
Malicious code in nova-quantum-protractor-commitlint (npm)
- Nov 13, 2025
Malicious code in nova-primatology-paleoclimatology-membrane (npm)
- Nov 13, 2025
Malicious code in nova-phoebe-kaus-gatsby (npm)
- Nov 13, 2025
Malicious code in nova-ini-greatfilter-hawkingradiation (npm)
- Nov 13, 2025
Malicious code in nova-chakra-ui-css-loader-eris (npm)
- Nov 13, 2025
Malicious code in nova-astro-playwright-mira (npm)
- Nov 13, 2025
Malicious code in notify-zero-abstract-old-dog (npm)
- Nov 13, 2025
Malicious code in notify-string-deploy-file-private (npm)
- Nov 13, 2025
Malicious code in notify-simple-theta-monitor-web (npm)
- Nov 13, 2025
Malicious code in notify-omega-process-kernel-protected (npm)
- Nov 13, 2025
Malicious code in notify-link-proxy-double-proxy (npm)
- Nov 13, 2025
Malicious code in notify-beta-tree-mock-minify (npm)
- Nov 13, 2025
Malicious code in norma-tool-stratigraphy-stop (npm)
- Nov 13, 2025
Malicious code in norma-sagitta-bellatrix-postgres (npm)
- Nov 13, 2025
Malicious code in norma-quantumfoam-loglevel-commitizen (npm)
- Nov 13, 2025
Malicious code in norma-public-grus-supercluster (npm)
- Nov 13, 2025
Malicious code in non-blocking-miranda-gridsome-cosmicray (npm)
- Nov 13, 2025
Malicious code in non-blocking-luna-axios-pegasus (npm)
- Nov 13, 2025
Malicious code in nodemon-vega-umbriel-polaris (npm)
- Nov 13, 2025
Malicious code in nodemon-terser-webpack-plugin-private-mantle (npm)
- Nov 13, 2025
Malicious code in nodemon-slides-frontend-tethys (npm)
- Nov 13, 2025
Malicious code in nodemon-meissa-outercore-hyperion (npm)
- Nov 13, 2025
Malicious code in nodemon-kinetic-native-cassini (npm)
- Nov 13, 2025
Malicious code in nodemon-heka-wezen-meissa (npm)
- Nov 13, 2025
Malicious code in nodemon-europa-antares-frontend (npm)
- Nov 13, 2025
Malicious code in nodemon-css-loader-husky-parcel (npm)
- Nov 13, 2025
Malicious code in nodejs-sublimation-blueshift-ganymede (npm)
- Nov 13, 2025
Malicious code in nodejs-sass-loader-carina-duplex (npm)
- Nov 13, 2025
Malicious code in nodejs-radioastronomy-tailwindcss-chalk (npm)
- Nov 13, 2025
Malicious code in nodejs-oberon-ignite-node-sass (npm)
- Nov 13, 2025
Malicious code in nodejs-hyperion-quito-start (npm)
- Nov 13, 2025
Malicious code in nodejs-csrf-sagitta-materialize (npm)
- Nov 13, 2025
Malicious code in nodejs-cosmicweb-chakra-ui-vortex (npm)
- Nov 13, 2025
Malicious code in node-sass-slides-koa-hexo (npm)
- Nov 13, 2025
Malicious code in node-sass-nuxtjs-octans-eris (npm)
Page 316 of 4,814