Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in nectarine-grape-gtfx (npm)
- Aug 14, 2025
Malicious code in nectarine-foxtrot-kbjd (npm)
- Aug 14, 2025
Malicious code in nectarine-foxtrot-hpmm (npm)
- Aug 14, 2025
Malicious code in nectarine-eyf-project (npm)
- Aug 14, 2025
Malicious code in nectarine-echo-lrvi (npm)
- Aug 14, 2025
Malicious code in nectarine-dba-project (npm)
- Aug 14, 2025
Malicious code in nectarine-d7h-project (npm)
- Aug 14, 2025
Malicious code in nectarine-cherry-fffq (npm)
- Aug 14, 2025
Malicious code in nectarine-bravo-onmy (npm)
- Aug 14, 2025
Malicious code in nectarine-alpha-vdlr (npm)
- Aug 14, 2025
Malicious code in nectarine-alpha-jzgv (npm)
- Aug 14, 2025
Malicious code in nectarine-acorn-pvmi (npm)
- Aug 14, 2025
Malicious code in nectarine-a3e-project (npm)
- Aug 14, 2025
Malicious code in nectarine-8dv-project (npm)
- Aug 14, 2025
Malicious code in nectarine-642-project (npm)
- Aug 14, 2025
Malicious code in nectarine-29j-project (npm)
- Aug 14, 2025
Malicious code in nectarine-225-project (npm)
- Aug 14, 2025
Malicious code in nectarine-0g8-project (npm)
- Aug 14, 2025
Malicious code in nectar_6adtn_0oolz_vista (npm)
- Aug 14, 2025
Malicious code in nectar_0rt3c_4xmby_quicksilver (npm)
- Aug 14, 2025
Malicious code in nectar-uranium-dil042-project (npm)
- Aug 14, 2025
Malicious code in nectar-uplift-lgk654-project (npm)
- Aug 14, 2025
Malicious code in nectar-topaz-wvj421-project (npm)
- Aug 14, 2025
Malicious code in nectar-orangutan-qka472-project (npm)
- Aug 14, 2025
Malicious code in nectar-luster-gvt889-project (npm)
- Aug 14, 2025
Malicious code in nectar-glisten-nom856-project (npm)
- Aug 14, 2025
Malicious code in nectar-desert-yka347-project (npm)
- Aug 14, 2025
Malicious code in nectar-caravan-kim477-project (npm)
- Aug 14, 2025
Malicious code in nectar-albatross-rgc368-project (npm)
- Aug 14, 2025
Malicious code in nectar-4fmc5-0l8ls-juniper-project (npm)
- Aug 14, 2025
Malicious code in nebula_wz50a_xx2v3_unity (npm)
- Aug 14, 2025
Malicious code in nebula_wcwer_izdqj_dream (npm)
- Aug 14, 2025
Malicious code in nebula-y7ihw-7dy2z-juniper-project (npm)
- Aug 14, 2025
Malicious code in nebula-xylophone-nom511-project (npm)
- Aug 14, 2025
Malicious code in nebula-xerox-hdp011-project (npm)
- Aug 14, 2025
Malicious code in nebula-xanadu-bno580-project (npm)
- Aug 14, 2025
Malicious code in nebula-whirlpool-zsi471-project (npm)
- Aug 14, 2025
Malicious code in nebula-warp-testcafe-impulse (npm)
- Aug 14, 2025
Malicious code in nebula-vortex-fgm018-project (npm)
- Aug 14, 2025
Malicious code in nebula-volcano-x7og (npm)
- Aug 14, 2025
Malicious code in nebula-violet-bek167-project (npm)
- Aug 14, 2025
Malicious code in nebula-vgxww-ij4k4-ice-project (npm)
- Aug 14, 2025
Malicious code in nebula-udon-qy9u (npm)
- Aug 14, 2025
Malicious code in nebula-tornado-hczb (npm)
- Aug 14, 2025
Malicious code in nebula-titan-3g9w (npm)
- Aug 14, 2025
Malicious code in nebula-radish-eol3 (npm)
- Aug 14, 2025
Malicious code in nebula-quilt-pgp840-project (npm)
- Aug 14, 2025
Malicious code in nebula-prairie-zcs243-project (npm)
- Aug 14, 2025
Malicious code in nebula-papaya-ym35 (npm)
- Aug 14, 2025
Malicious code in nebula-nutmeg-8vb0 (npm)
Page 5447 of 6,634