Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,135 total in npm · sorted newest first- Aug 14, 2025
Malicious code in nightmare-titan-buffer-titan (npm)
- Aug 14, 2025
Malicious code in nightmare-markdownlint-resolvers-frontend (npm)
- Aug 14, 2025
Malicious code in nightmare-config-lepton-telesto (npm)
- Aug 14, 2025
Malicious code in nightly_builds (npm)
- Aug 14, 2025
Malicious code in nightingale-yambean-k21w (npm)
- Aug 14, 2025
Malicious code in nightingale-whiskey-ex3l (npm)
- Aug 14, 2025
Malicious code in nightingale-rainbow-hg5s (npm)
- Aug 14, 2025
Malicious code in nightingale-jalapeno-qh2f (npm)
- Aug 14, 2025
Malicious code in nightingale-comet-y4oa (npm)
- Aug 14, 2025
Malicious code in nightingale-beetroot-3867 (npm)
- Aug 14, 2025
Malicious code in night_qu1qa_h5z0a_drizzle (npm)
- Aug 14, 2025
Malicious code in night_qbwdy_bkz4k_rainbow (npm)
- Aug 14, 2025
Malicious code in night_nhfqp_hssjn_kryptonite (npm)
- Aug 14, 2025
Malicious code in night_lztkw_23llz_snow (npm)
- Aug 14, 2025
Malicious code in night_htpqn_babqa_xenolith (npm)
- Aug 14, 2025
Malicious code in night_e3baf_0q0ph_glacier (npm)
- Aug 14, 2025
Malicious code in night_asogv_78bqo_aspen (npm)
- Aug 14, 2025
Malicious code in night_akr3h_os9hy_serenade (npm)
- Aug 14, 2025
Malicious code in night-i8gx0-5vwos-pinnacle-project (npm)
- Aug 14, 2025
Malicious code in night-bwpnj-4ygqa-quill-project (npm)
- Aug 14, 2025
Malicious code in night-4ocdw-8st6g-boulder-project (npm)
- Aug 14, 2025
Malicious code in night-4m111-bsrd8-coral-project (npm)
- Aug 14, 2025
Malicious code in night-2jjoo-2tfif-xanadu-project (npm)
- Aug 14, 2025
Malicious code in nigdje (npm)
- Aug 14, 2025
Malicious code in nift-contract-viewer (npm)
- Aug 14, 2025
Malicious code in nidawork (npm)
- Aug 14, 2025
Malicious code in nicolasss (npm)
- Aug 14, 2025
Malicious code in nickalis (npm)
- Aug 14, 2025
Malicious code in nicerest (npm)
- Aug 14, 2025
Malicious code in ni-node-devtools (npm)
- Aug 14, 2025
Malicious code in nhsbugs (npm)
- Aug 14, 2025
Malicious code in nhlscrapi (npm)
- Aug 14, 2025
Malicious code in nhangman (npm)
- Aug 14, 2025
Malicious code in ngx-translatexxx (npm)
- Aug 14, 2025
Malicious code in ngx-top (npm)
- Aug 14, 2025
Malicious code in ngx-qrscanner (npm)
- Aug 14, 2025
Malicious code in ngx-material-keyboard (npm)
- Aug 14, 2025
Malicious code in ngx-i2e-user-profile (npm)
- Aug 14, 2025
Malicious code in nguyenlienmanh (npm)
- Aug 14, 2025
Malicious code in ngthreejs (npm)
- Aug 14, 2025
Malicious code in ngrx (npm)
- Aug 14, 2025
Malicious code in nginxmq (npm)
- Aug 14, 2025
Malicious code in nggeolocation (npm)
- Aug 14, 2025
Malicious code in ngappain (npm)
- Aug 14, 2025
Malicious code in ng2-webapi (npm)
- Aug 14, 2025
Malicious code in ng2-uikit (npm)
- Aug 14, 2025
Malicious code in ng2-tel-input-2k2318 (npm)
- Aug 14, 2025
Malicious code in ng2-social-share-wts (npm)
- Aug 14, 2025
Malicious code in ng2-select-dev (npm)
- Aug 14, 2025
Malicious code in ng2-responsive-lib (npm)
Page 5470 of 6,663