Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in node_view (npm)
- Aug 14, 2025
Malicious code in node_resolve_nested_main (npm)
- Aug 14, 2025
Malicious code in node_resolve_main_2 (npm)
- Aug 14, 2025
Malicious code in node_resolve_main (npm)
- Aug 14, 2025
Malicious code in node_api_auth (npm)
- Aug 14, 2025
Malicious code in node10-earnest-db (npm)
- Aug 14, 2025
Malicious code in node.js (npm)
- Aug 14, 2025
Malicious code in node-zoodubbo (npm)
- Aug 14, 2025
Malicious code in node-zenvia (npm)
- Aug 14, 2025
Malicious code in node-youtube-dash-sidx (npm)
- Aug 14, 2025
Malicious code in node-woff2 (npm)
- Aug 14, 2025
Malicious code in node-venues (npm)
- Aug 14, 2025
Malicious code in node-urlcharset (npm)
- Aug 14, 2025
Malicious code in node-unified-login-url (npm)
- Aug 14, 2025
Malicious code in node-toon (npm)
- Aug 14, 2025
Malicious code in node-teste-api (npm)
- Aug 14, 2025
Malicious code in node-spdy (npm)
- Aug 14, 2025
Malicious code in node-smsk (npm)
- Aug 14, 2025
Malicious code in node-showcase (npm)
- Aug 14, 2025
Malicious code in node-sfnt2woff-zopfli (npm)
- Aug 14, 2025
Malicious code in node-sass-win32-x64 (npm)
- Aug 14, 2025
Malicious code in node-sass-exoplanet-koa-browserify (npm)
- Aug 14, 2025
Malicious code in node-sass-dependencies-solis-zenith (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-ys7 (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-xmlc14n (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-wotkit (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-storfly-vtview (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-storfly-iot-vtview (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-storfly-iot-hp (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-objstore (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-modbusio (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-max31856 (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-john-temp (npm)
- Aug 14, 2025
Malicious code in node-red-contrib-flows_splitter (npm)
- Aug 14, 2025
Malicious code in node-red-azure-iot-hub (npm)
- Aug 14, 2025
Malicious code in node-postcodeanywhere-api (npm)
- Aug 14, 2025
Malicious code in node-pipeline-ec2 (npm)
- Aug 14, 2025
Malicious code in node-pelcod-decoder (npm)
- Aug 14, 2025
Malicious code in node-oauth-walkthrough (npm)
- Aug 14, 2025
Malicious code in node-novacredit (npm)
- Aug 14, 2025
Malicious code in node-mws-sdk (npm)
- Aug 14, 2025
Malicious code in node-migemo (npm)
- Aug 14, 2025
Malicious code in node-memory-stream (npm)
- Aug 14, 2025
Malicious code in node-lolibooru (npm)
- Aug 14, 2025
Malicious code in node-log-stream (npm)
- Aug 14, 2025
Malicious code in node-laravel-session-ahss-testing (npm)
- Aug 14, 2025
Malicious code in node-keyval-httpget (npm)
- Aug 14, 2025
Malicious code in node-jlink (npm)
- Aug 14, 2025
Malicious code in node-http-langdetect (npm)
- Aug 14, 2025
Malicious code in node-heatpipe-publisher (npm)
Page 5438 of 6,634