Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in nebula-november-ine8 (npm)
- Aug 14, 2025
Malicious code in nebula-mushroom-wtc0 (npm)
- Aug 14, 2025
Malicious code in nebula-memkv (npm)
- Aug 14, 2025
Malicious code in nebula-lyra-quark-frontend (npm)
- Aug 14, 2025
Malicious code in nebula-local (npm)
- Aug 14, 2025
Malicious code in nebula-less-pegasus-cybernetics (npm)
- Aug 14, 2025
Malicious code in nebula-kiwi-yri081-project (npm)
- Aug 14, 2025
Malicious code in nebula-juniper-pkk8 (npm)
- Aug 14, 2025
Malicious code in nebula-js (npm)
- Aug 14, 2025
Malicious code in nebula-forever-subduction-playwright (npm)
- Aug 14, 2025
Malicious code in nebula-firebase-queue (npm)
- Aug 14, 2025
Malicious code in nebula-dune-ywj856-project (npm)
- Aug 14, 2025
Malicious code in nebula-date-kbj0 (npm)
- Aug 14, 2025
Malicious code in nebula-coral-dgp055-project (npm)
- Aug 14, 2025
Malicious code in nebula-cliff-exr201-project (npm)
- Aug 14, 2025
Malicious code in nebula-chai-luna-primatology (npm)
- Aug 14, 2025
Malicious code in nebula-caravan-lvp365-project (npm)
- Aug 14, 2025
Malicious code in nebula-autobahn (npm)
- Aug 14, 2025
Malicious code in nebula-ant-hcg665-project (npm)
- Aug 14, 2025
Malicious code in nebula-acsit-9kca5-nymph-project (npm)
- Aug 14, 2025
Malicious code in nebula-81vj3-n6v4x-yarrow-project (npm)
- Aug 14, 2025
Malicious code in nebula-7agn9-zp9t3-whisper-project (npm)
- Aug 14, 2025
Malicious code in neap-core (npm)
- Aug 14, 2025
Malicious code in ndxgfqjivkcwymut (npm)
- Aug 14, 2025
Malicious code in ndatabase (npm)
- Aug 14, 2025
Malicious code in ndarry (npm)
- Aug 14, 2025
Malicious code in ncvvb3 (npm)
- Aug 14, 2025
Malicious code in ncustom (npm)
- Aug 14, 2025
Malicious code in ncpapp (npm)
- Aug 14, 2025
Malicious code in nconf-venus-remark-init (npm)
- Aug 14, 2025
Malicious code in nconf-spawn-mocha-selenium (npm)
- Aug 14, 2025
Malicious code in nconf-sirius-dorado-soap (npm)
- Aug 14, 2025
Malicious code in nconf-galaxy-repository-cosmos (npm)
- Aug 14, 2025
Malicious code in nconf-cybernetics-greatfilter-quasarjet (npm)
- Aug 14, 2025
Malicious code in nconf-atlas-mutation-await (npm)
- Aug 14, 2025
Malicious code in nconf-ariel-vuepress-hexo (npm)
- Aug 14, 2025
Malicious code in ncextract (npm)
- Aug 14, 2025
Malicious code in ncdt (npm)
- Aug 14, 2025
Malicious code in nccgelie (npm)
- Aug 14, 2025
Malicious code in nccboo (npm)
- Aug 14, 2025
Malicious code in nbxfkcvgkrdtloqp (npm)
- Aug 14, 2025
Malicious code in nboevents (npm)
- Aug 14, 2025
Malicious code in nbm-cli (npm)
- Aug 14, 2025
Malicious code in nblogtry (npm)
- Aug 14, 2025
Malicious code in nbhdspa (npm)
- Aug 14, 2025
Malicious code in nbc-enquirer (npm)
- Aug 14, 2025
Malicious code in nbandroid (npm)
- Aug 14, 2025
Malicious code in nba-node (npm)
- Aug 14, 2025
Malicious code in nb-lib-alma (npm)
- Aug 14, 2025
Malicious code in nb-dashboard (npm)
Page 5448 of 6,634