Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in nutmeg-quercus-4o70 (npm)
- Aug 14, 2025
Malicious code in nutmeg-quarry-hmww (npm)
- Aug 14, 2025
Malicious code in nutmeg-papaya-9dwz (npm)
- Aug 14, 2025
Malicious code in nutmeg-observatory-6jte (npm)
- Aug 14, 2025
Malicious code in nutmeg-larch-07xs (npm)
- Aug 14, 2025
Malicious code in nutmeg-golf-gphn (npm)
- Aug 14, 2025
Malicious code in nusacm (npm)
- Aug 14, 2025
Malicious code in nurul-tahutek87-breki (npm)
- Aug 14, 2025
Malicious code in nurul-sate47-kuki (npm)
- Aug 14, 2025
Malicious code in nurul-pisang28-breki (npm)
- Aug 14, 2025
Malicious code in nurul-lumpur94-sukiwir (npm)
- Aug 14, 2025
Malicious code in nurul-lapis14-breki (npm)
- Aug 14, 2025
Malicious code in nurul-kue85-sukiwir (npm)
- Aug 14, 2025
Malicious code in nurul-kolak62-breki (npm)
- Aug 14, 2025
Malicious code in nurul-klanting49-kuki (npm)
- Aug 14, 2025
Malicious code in nurul-keripik88-kuki (npm)
- Aug 14, 2025
Malicious code in nurul-getuk9-sukiwir (npm)
- Aug 14, 2025
Malicious code in nurul-gaplek81-breki (npm)
- Aug 14, 2025
Malicious code in nuommy (npm)
- Aug 14, 2025
Malicious code in nuomibundle (npm)
- Aug 14, 2025
Malicious code in nuntius-api-client (npm)
- Aug 14, 2025
Malicious code in nummets (npm)
- Aug 14, 2025
Malicious code in nugget-zephyr-rwx261-project (npm)
- Aug 14, 2025
Malicious code in nugget-whale-ofv016-project (npm)
- Aug 14, 2025
Malicious code in nugget-waterfall-mze621-project (npm)
- Aug 14, 2025
Malicious code in nugget-violet-vyb678-project (npm)
- Aug 14, 2025
Malicious code in nugget-tulip-efm321-project (npm)
- Aug 14, 2025
Malicious code in nugget-river-ofq691-project (npm)
- Aug 14, 2025
Malicious code in nugget-peacock-ald805-project (npm)
- Aug 14, 2025
Malicious code in nugget-ocean-qoz163-project (npm)
- Aug 14, 2025
Malicious code in nugget-nymph-zfk553-project (npm)
- Aug 14, 2025
Malicious code in nugget-nymph-cty082-project (npm)
- Aug 14, 2025
Malicious code in nugget-nectar-ayv886-project (npm)
- Aug 14, 2025
Malicious code in nugget-lagoon-awn014-project (npm)
- Aug 14, 2025
Malicious code in nugget-jasmine-tta368-project (npm)
- Aug 14, 2025
Malicious code in nugget-forest-wkz193-project (npm)
- Aug 14, 2025
Malicious code in nugget-cloud-xpq065-project (npm)
- Aug 14, 2025
Malicious code in nugget-cascade-mms367-project (npm)
- Aug 14, 2025
Malicious code in nugget-aroma-zyb372-project (npm)
- Aug 14, 2025
Malicious code in nufound (npm)
- Aug 14, 2025
Malicious code in nudge_client (npm)
- Aug 14, 2025
Malicious code in NudeJS (npm)
- Aug 14, 2025
Malicious code in nudeenmu (npm)
- Aug 14, 2025
Malicious code in nucleotide-biomeme (npm)
- Aug 14, 2025
Malicious code in nucleosynthesis-halley-optimize-css-assets-webpack-plugin-nebula (npm)
- Aug 14, 2025
Malicious code in nucleosynthesis-antares-zephyr-tardigrade (npm)
- Aug 14, 2025
Malicious code in nu-tree-test-resolve-phi (npm)
- Aug 14, 2025
Malicious code in nu-refactor-load-boolean-log (npm)
- Aug 14, 2025
Malicious code in nu-deploy-sigma-mu-grid (npm)
- Aug 14, 2025
Malicious code in nty4 (npm)
Page 5433 of 6,634