Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Aug 14, 2025
Malicious code in NudeJS (npm)
- Aug 14, 2025
Malicious code in nudeenmu (npm)
- Aug 14, 2025
Malicious code in nucleotide-biomeme (npm)
- Aug 14, 2025
Malicious code in nucleosynthesis-halley-optimize-css-assets-webpack-plugin-nebula (npm)
- Aug 14, 2025
Malicious code in nucleosynthesis-antares-zephyr-tardigrade (npm)
- Aug 14, 2025
Malicious code in nu-tree-test-resolve-phi (npm)
- Aug 14, 2025
Malicious code in nu-refactor-load-boolean-log (npm)
- Aug 14, 2025
Malicious code in nu-deploy-sigma-mu-grid (npm)
- Aug 14, 2025
Malicious code in nty4 (npm)
- Aug 14, 2025
Malicious code in ntuvote (npm)
- Aug 14, 2025
Malicious code in ntt4 (npm)
- Aug 14, 2025
Malicious code in ntr4 (npm)
- Aug 14, 2025
Malicious code in ntde2 (npm)
- Aug 14, 2025
Malicious code in nsuweave (npm)
- Aug 14, 2025
Malicious code in nstuinfo (npm)
- Aug 14, 2025
Malicious code in nsoric (npm)
- Aug 14, 2025
Malicious code in nsjqkgemzuwixlcf (npm)
- Aug 14, 2025
Malicious code in nshtools (npm)
- Aug 14, 2025
Malicious code in ns-sha3 (npm)
- Aug 14, 2025
Malicious code in nrt3dwww (npm)
- Aug 14, 2025
Malicious code in nrr4 (npm)
- Aug 14, 2025
Malicious code in nrlcm (npm)
- Aug 14, 2025
Malicious code in nrg-timekeeper (npm)
- Aug 14, 2025
Malicious code in nr9pg3 (npm)
- Aug 14, 2025
Malicious code in nr31a (npm)
- Aug 14, 2025
Malicious code in nr1-browser-analyzer (npm)
- Aug 14, 2025
Malicious code in nquads (npm)
- Aug 14, 2025
Malicious code in nqm-auth-server (npm)
- Aug 14, 2025
Malicious code in npzcwkrjeqboafdg (npm)
- Aug 14, 2025
Malicious code in npwidgets (npm)
- Aug 14, 2025
Malicious code in npmtestnacho (npm)
- Aug 14, 2025
Malicious code in npmpubman (npm)
- Aug 14, 2025
Malicious code in npmb (npm)
- Aug 14, 2025
Malicious code in npm_release_test (npm)
- Aug 14, 2025
Malicious code in npm-yakutsk-neutrino-dysonswarm (npm)
- Aug 14, 2025
Malicious code in npm-uninstall-readable-blaze (npm)
- Aug 14, 2025
Malicious code in npm-test-install (npm)
- Aug 14, 2025
Malicious code in npm-suite-extras (npm)
- Aug 14, 2025
Malicious code in npm-stream-archaeometry-despina (npm)
- Aug 14, 2025
Malicious code in npm-shasum (npm)
- Aug 14, 2025
Malicious code in npm-security-check (npm)
- Aug 14, 2025
Malicious code in npm-script-demo (npm)
- Aug 14, 2025
Malicious code in npm-republish (npm)
- Aug 14, 2025
Malicious code in npm-published-package (npm)
- Aug 14, 2025
Malicious code in npm-primatology-async-event (npm)
- Aug 14, 2025
Malicious code in npm-paleoclimatology-changelog-pino (npm)
- Aug 14, 2025
Malicious code in npm-message (npm)
- Aug 14, 2025
Malicious code in npm-jy-test (npm)
- Aug 14, 2025
Malicious code in npm-include (npm)
- Aug 14, 2025
Malicious code in npm-import (npm)
Page 5897 of 7,327