Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in nanotechnology-astroinformatics-sails-vega (npm)
- Aug 14, 2025
Malicious code in nanophage (npm)
- Aug 14, 2025
Malicious code in nanold (npm)
- Aug 14, 2025
Malicious code in nancangku (npm)
- Aug 14, 2025
Malicious code in nana-papeda83-breki (npm)
- Aug 14, 2025
Malicious code in nana-keripik98-breki (npm)
- Aug 14, 2025
Malicious code in nana-esdoger69-breki (npm)
- Aug 14, 2025
Malicious code in nampnq (npm)
- Aug 14, 2025
Malicious code in NAME (npm)
- Aug 14, 2025
Malicious code in nakupujem (npm)
- Aug 14, 2025
Malicious code in nakloggg (npm)
- Aug 14, 2025
Malicious code in nakjava (npm)
- Aug 14, 2025
Malicious code in naivbzlpcjtfqkrd (npm)
- Aug 14, 2025
Malicious code in nailette (npm)
- Aug 14, 2025
Malicious code in nagibabel (npm)
- Aug 14, 2025
Malicious code in nagaraj (npm)
- Aug 14, 2025
Malicious code in nadir_component (npm)
- Aug 14, 2025
Malicious code in nadia-teh93-sukiwir (npm)
- Aug 14, 2025
Malicious code in nadia-semur13-breki (npm)
- Aug 14, 2025
Malicious code in nadia-sambel12-breki (npm)
- Aug 14, 2025
Malicious code in nadia-naget79-sukiwir (npm)
- Aug 14, 2025
Malicious code in nadia-mieayam91-breki (npm)
- Aug 14, 2025
Malicious code in nadia-mieayam55-sukiwir (npm)
- Aug 14, 2025
Malicious code in nadia-mangga100-kuki (npm)
- Aug 14, 2025
Malicious code in nadia-kripik33-sukiwir (npm)
- Aug 14, 2025
Malicious code in nadia-jus72-breki (npm)
- Aug 14, 2025
Malicious code in nadia-jamblang80-breki (npm)
- Aug 14, 2025
Malicious code in nadia-bakwan56-sukiwir (npm)
- Aug 14, 2025
Malicious code in naabscan (npm)
- Aug 14, 2025
Malicious code in n8n-nodes-msdyn365bc (npm)
- Aug 14, 2025
Malicious code in n5q1lb (npm)
- Aug 14, 2025
Malicious code in n3-ux (npm)
- Aug 14, 2025
Malicious code in n1-avatars (npm)
- Aug 14, 2025
Malicious code in n-safe-logger (npm)
- Aug 14, 2025
Malicious code in n-landing (npm)
- Aug 14, 2025
Malicious code in mzodal (npm)
- Aug 14, 2025
Malicious code in mz-vue-datepicker (npm)
- Aug 14, 2025
Malicious code in mz-require (npm)
- Aug 14, 2025
Malicious code in myyntikone-cal-traintypes (npm)
- Aug 14, 2025
Malicious code in myyntikone-cal-tickets (npm)
- Aug 14, 2025
Malicious code in mywebapps (npm)
- Aug 14, 2025
Malicious code in mytwist (npm)
- Aug 14, 2025
Malicious code in mytrlog (npm)
- Aug 14, 2025
Malicious code in mytrelloa (npm)
- Aug 14, 2025
Malicious code in mytonling (npm)
- Aug 14, 2025
Malicious code in mythquiz (npm)
- Aug 14, 2025
Malicious code in mythidiff-api (npm)
- Aug 14, 2025
Malicious code in myth-zodiac-rhm470-project (npm)
- Aug 14, 2025
Malicious code in myth-vista-ayv259-project (npm)
- Aug 14, 2025
Malicious code in myth-reef-bio561-project (npm)
Page 5450 of 6,634