Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in nekohoshi (npm)
- Aug 14, 2025
Malicious code in neilapp (npm)
- Aug 14, 2025
Malicious code in neihan (npm)
- Aug 14, 2025
Malicious code in nei-hbs (npm)
- Aug 14, 2025
Malicious code in nehsaa (npm)
- Aug 14, 2025
Malicious code in neglst (npm)
- Aug 14, 2025
Malicious code in nefties-defenders-server (npm)
- Aug 14, 2025
Malicious code in nefandro (npm)
- Aug 14, 2025
Malicious code in neev-communication (npm)
- Aug 14, 2025
Malicious code in neetomo (npm)
- Aug 14, 2025
Malicious code in neefull (npm)
- Aug 14, 2025
Malicious code in nectarine-zulu-xigua-qywou (npm)
- Aug 14, 2025
Malicious code in nectarine-yam-uniform-ggbmw (npm)
- Aug 14, 2025
Malicious code in nectarine-yam-juliet-lcntj (npm)
- Aug 14, 2025
Malicious code in nectarine-xylophone-fnwv (npm)
- Aug 14, 2025
Malicious code in nectarine-xray-date-uofho (npm)
- Aug 14, 2025
Malicious code in nectarine-xray-charlie-yosyj (npm)
- Aug 14, 2025
Malicious code in nectarine-xigua-alpha-hlavp (npm)
- Aug 14, 2025
Malicious code in nectarine-wrn-project (npm)
- Aug 14, 2025
Malicious code in nectarine-whiskey-xrxx (npm)
- Aug 14, 2025
Malicious code in nectarine-whiskey-dlhu (npm)
- Aug 14, 2025
Malicious code in nectarine-w9f-project (npm)
- Aug 14, 2025
Malicious code in nectarine-vvs-project (npm)
- Aug 14, 2025
Malicious code in nectarine-victor-xamp (npm)
- Aug 14, 2025
Malicious code in nectarine-victor-ugli-lwbsg (npm)
- Aug 14, 2025
Malicious code in nectarine-victor-bqib (npm)
- Aug 14, 2025
Malicious code in nectarine-ul1-project (npm)
- Aug 14, 2025
Malicious code in nectarine-ui8-project (npm)
- Aug 14, 2025
Malicious code in nectarine-ugli-qcoo (npm)
- Aug 14, 2025
Malicious code in nectarine-sierra-mvfm (npm)
- Aug 14, 2025
Malicious code in nectarine-sierra-bravo-okyrw (npm)
- Aug 14, 2025
Malicious code in nectarine-r3g-project (npm)
- Aug 14, 2025
Malicious code in nectarine-quince-yxre (npm)
- Aug 14, 2025
Malicious code in nectarine-quebec-apwa (npm)
- Aug 14, 2025
Malicious code in nectarine-oscar-uxoe (npm)
- Aug 14, 2025
Malicious code in nectarine-oscar-uawa (npm)
- Aug 14, 2025
Malicious code in nectarine-orange-grape-inqyu (npm)
- Aug 14, 2025
Malicious code in nectarine-nve-project (npm)
- Aug 14, 2025
Malicious code in nectarine-nutmeg-q7bq (npm)
- Aug 14, 2025
Malicious code in nectarine-mike-golf-fsydh (npm)
- Aug 14, 2025
Malicious code in nectarine-mfy-project (npm)
- Aug 14, 2025
Malicious code in nectarine-mango-golf-oylfu (npm)
- Aug 14, 2025
Malicious code in nectarine-lor-project (npm)
- Aug 14, 2025
Malicious code in nectarine-lima-kxru (npm)
- Aug 14, 2025
Malicious code in nectarine-lemon-m4mw (npm)
- Aug 14, 2025
Malicious code in nectarine-lemon-iizh (npm)
- Aug 14, 2025
Malicious code in nectarine-kpu-project (npm)
- Aug 14, 2025
Malicious code in nectarine-juliet-prgk (npm)
- Aug 14, 2025
Malicious code in nectarine-horseradish-obpb (npm)
- Aug 14, 2025
Malicious code in nectarine-gzu-project (npm)
Page 5446 of 6,634