Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Aug 14, 2025
Malicious code in npm-hello-artifactory (npm)
- Aug 14, 2025
Malicious code in npm-for-each (npm)
- Aug 14, 2025
Malicious code in npm-exploit (npm)
- Aug 14, 2025
Malicious code in npm-eurostar-libs (npm)
- Aug 14, 2025
Malicious code in npm-download-counts-v2 (npm)
- Aug 14, 2025
Malicious code in npm-chalk-wolf-aurora (npm)
- Aug 14, 2025
Malicious code in npm-bomb (npm)
- Aug 14, 2025
Malicious code in npm-babel-parser (npm)
- Aug 14, 2025
Malicious code in npm-apply (npm)
- Aug 14, 2025
Malicious code in npm-all-packages (npm)
- Aug 14, 2025
Malicious code in nphardly (npm)
- Aug 14, 2025
Malicious code in np_core_utils (npm)
- Aug 14, 2025
Malicious code in nozapret (npm)
- Aug 14, 2025
Malicious code in nowasky3 (npm)
- Aug 14, 2025
Malicious code in nowasky2 (npm)
- Aug 14, 2025
Malicious code in now-report (npm)
- Aug 14, 2025
Malicious code in now-rate-limit (npm)
- Aug 14, 2025
Malicious code in now-download (npm)
- Aug 14, 2025
Malicious code in now-auto-alias (npm)
- Aug 14, 2025
Malicious code in novuscoin (npm)
- Aug 14, 2025
Malicious code in novini (npm)
- Aug 14, 2025
Malicious code in november-zvr-project (npm)
- Aug 14, 2025
Malicious code in november-zulu-tosm (npm)
- Aug 14, 2025
Malicious code in november-zulu-jmis (npm)
- Aug 14, 2025
Malicious code in november-zucchini-xray-jqrub (npm)
- Aug 14, 2025
Malicious code in november-zucchini-aklp (npm)
- Aug 14, 2025
Malicious code in november-zdf-project (npm)
- Aug 14, 2025
Malicious code in november-yam-znjk (npm)
- Aug 14, 2025
Malicious code in november-xigua-huui (npm)
- Aug 14, 2025
Malicious code in november-whiskey-lemon-nydbb (npm)
- Aug 14, 2025
Malicious code in november-whiskey-hdiu (npm)
- Aug 14, 2025
Malicious code in november-whiskey-cxjp (npm)
- Aug 14, 2025
Malicious code in november-vanilla-juliet-rwlor (npm)
- Aug 14, 2025
Malicious code in november-romeo-nectarine-wqyaw (npm)
- Aug 14, 2025
Malicious code in november-rkf-project (npm)
- Aug 14, 2025
Malicious code in november-papaya-victor-ywjhr (npm)
- Aug 14, 2025
Malicious code in november-papa-fig-qfkxa (npm)
- Aug 14, 2025
Malicious code in november-papa-ccwi (npm)
- Aug 14, 2025
Malicious code in november-orange-ygvn (npm)
- Aug 14, 2025
Malicious code in november-orange-qbsj (npm)
- Aug 14, 2025
Malicious code in november-nectarine-charlie-bzxrb (npm)
- Aug 14, 2025
Malicious code in november-n3k-project (npm)
- Aug 14, 2025
Malicious code in november-mike-dduz (npm)
- Aug 14, 2025
Malicious code in november-lzd-project (npm)
- Aug 14, 2025
Malicious code in november-lemon-psdj (npm)
- Aug 14, 2025
Malicious code in november-kiwi-qv5p (npm)
- Aug 14, 2025
Malicious code in november-kilo-ugli-bwdhi (npm)
- Aug 14, 2025
Malicious code in november-kilo-raoa (npm)
- Aug 14, 2025
Malicious code in november-kilo-ltbi (npm)
- Aug 14, 2025
Malicious code in november-juliet-xgdo (npm)
Page 5898 of 7,327