Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in npm-all-packages (npm)
- Aug 14, 2025
Malicious code in nphardly (npm)
- Aug 14, 2025
Malicious code in np_core_utils (npm)
- Aug 14, 2025
Malicious code in nozapret (npm)
- Aug 14, 2025
Malicious code in nowasky3 (npm)
- Aug 14, 2025
Malicious code in nowasky2 (npm)
- Aug 14, 2025
Malicious code in now-report (npm)
- Aug 14, 2025
Malicious code in now-rate-limit (npm)
- Aug 14, 2025
Malicious code in now-download (npm)
- Aug 14, 2025
Malicious code in now-auto-alias (npm)
- Aug 14, 2025
Malicious code in novuscoin (npm)
- Aug 14, 2025
Malicious code in novini (npm)
- Aug 14, 2025
Malicious code in november-zvr-project (npm)
- Aug 14, 2025
Malicious code in november-zulu-tosm (npm)
- Aug 14, 2025
Malicious code in november-zulu-jmis (npm)
- Aug 14, 2025
Malicious code in november-zucchini-xray-jqrub (npm)
- Aug 14, 2025
Malicious code in november-zucchini-aklp (npm)
- Aug 14, 2025
Malicious code in november-zdf-project (npm)
- Aug 14, 2025
Malicious code in november-yam-znjk (npm)
- Aug 14, 2025
Malicious code in november-xigua-huui (npm)
- Aug 14, 2025
Malicious code in november-whiskey-lemon-nydbb (npm)
- Aug 14, 2025
Malicious code in november-whiskey-hdiu (npm)
- Aug 14, 2025
Malicious code in november-whiskey-cxjp (npm)
- Aug 14, 2025
Malicious code in november-vanilla-juliet-rwlor (npm)
- Aug 14, 2025
Malicious code in november-romeo-nectarine-wqyaw (npm)
- Aug 14, 2025
Malicious code in november-rkf-project (npm)
- Aug 14, 2025
Malicious code in november-papaya-victor-ywjhr (npm)
- Aug 14, 2025
Malicious code in november-papa-fig-qfkxa (npm)
- Aug 14, 2025
Malicious code in november-papa-ccwi (npm)
- Aug 14, 2025
Malicious code in november-orange-ygvn (npm)
- Aug 14, 2025
Malicious code in november-orange-qbsj (npm)
- Aug 14, 2025
Malicious code in november-nectarine-charlie-bzxrb (npm)
- Aug 14, 2025
Malicious code in november-n3k-project (npm)
- Aug 14, 2025
Malicious code in november-mike-dduz (npm)
- Aug 14, 2025
Malicious code in november-lzd-project (npm)
- Aug 14, 2025
Malicious code in november-lemon-psdj (npm)
- Aug 14, 2025
Malicious code in november-kiwi-qv5p (npm)
- Aug 14, 2025
Malicious code in november-kilo-ugli-bwdhi (npm)
- Aug 14, 2025
Malicious code in november-kilo-raoa (npm)
- Aug 14, 2025
Malicious code in november-kilo-ltbi (npm)
- Aug 14, 2025
Malicious code in november-juliet-xgdo (npm)
- Aug 14, 2025
Malicious code in november-jd1-project (npm)
- Aug 14, 2025
Malicious code in november-india-jzbg (npm)
- Aug 14, 2025
Malicious code in november-igloo-o9bu (npm)
- Aug 14, 2025
Malicious code in november-honeydew-mango-uosuc (npm)
- Aug 14, 2025
Malicious code in november-honeydew-hotel-kfjbc (npm)
- Aug 14, 2025
Malicious code in november-golf-tyoc (npm)
- Aug 14, 2025
Malicious code in november-golf-pcla (npm)
- Aug 14, 2025
Malicious code in november-ginkgo-f7r5 (npm)
- Aug 14, 2025
Malicious code in november-fig-vysq (npm)
Page 5435 of 6,634