Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ntuvote (npm)
- Aug 14, 2025
Malicious code in ntt4 (npm)
- Aug 14, 2025
Malicious code in ntr4 (npm)
- Aug 14, 2025
Malicious code in ntde2 (npm)
- Aug 14, 2025
Malicious code in nsuweave (npm)
- Aug 14, 2025
Malicious code in nstuinfo (npm)
- Aug 14, 2025
Malicious code in nsoric (npm)
- Aug 14, 2025
Malicious code in nsjqkgemzuwixlcf (npm)
- Aug 14, 2025
Malicious code in nshtools (npm)
- Aug 14, 2025
Malicious code in ns-sha3 (npm)
- Aug 14, 2025
Malicious code in nrt3dwww (npm)
- Aug 14, 2025
Malicious code in nrr4 (npm)
- Aug 14, 2025
Malicious code in nrlcm (npm)
- Aug 14, 2025
Malicious code in nrg-timekeeper (npm)
- Aug 14, 2025
Malicious code in nr9pg3 (npm)
- Aug 14, 2025
Malicious code in nr31a (npm)
- Aug 14, 2025
Malicious code in nr1-browser-analyzer (npm)
- Aug 14, 2025
Malicious code in nquads (npm)
- Aug 14, 2025
Malicious code in nqm-auth-server (npm)
- Aug 14, 2025
Malicious code in npzcwkrjeqboafdg (npm)
- Aug 14, 2025
Malicious code in npwidgets (npm)
- Aug 14, 2025
Malicious code in npmtestnacho (npm)
- Aug 14, 2025
Malicious code in npmpubman (npm)
- Aug 14, 2025
Malicious code in npmb (npm)
- Aug 14, 2025
Malicious code in npm_release_test (npm)
- Aug 14, 2025
Malicious code in npm-yakutsk-neutrino-dysonswarm (npm)
- Aug 14, 2025
Malicious code in npm-uninstall-readable-blaze (npm)
- Aug 14, 2025
Malicious code in npm-test-install (npm)
- Aug 14, 2025
Malicious code in npm-suite-extras (npm)
- Aug 14, 2025
Malicious code in npm-stream-archaeometry-despina (npm)
- Aug 14, 2025
Malicious code in npm-shasum (npm)
- Aug 14, 2025
Malicious code in npm-security-check (npm)
- Aug 14, 2025
Malicious code in npm-script-demo (npm)
- Aug 14, 2025
Malicious code in npm-republish (npm)
- Aug 14, 2025
Malicious code in npm-published-package (npm)
- Aug 14, 2025
Malicious code in npm-primatology-async-event (npm)
- Aug 14, 2025
Malicious code in npm-paleoclimatology-changelog-pino (npm)
- Aug 14, 2025
Malicious code in npm-message (npm)
- Aug 14, 2025
Malicious code in npm-jy-test (npm)
- Aug 14, 2025
Malicious code in npm-include (npm)
- Aug 14, 2025
Malicious code in npm-import (npm)
- Aug 14, 2025
Malicious code in npm-hello-artifactory (npm)
- Aug 14, 2025
Malicious code in npm-for-each (npm)
- Aug 14, 2025
Malicious code in npm-exploit (npm)
- Aug 14, 2025
Malicious code in npm-eurostar-libs (npm)
- Aug 14, 2025
Malicious code in npm-download-counts-v2 (npm)
- Aug 14, 2025
Malicious code in npm-chalk-wolf-aurora (npm)
- Aug 14, 2025
Malicious code in npm-bomb (npm)
- Aug 14, 2025
Malicious code in npm-babel-parser (npm)
- Aug 14, 2025
Malicious code in npm-apply (npm)
Page 5434 of 6,634