Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Aug 14, 2025
Malicious code in notebolt (npm)
- Aug 14, 2025
Malicious code in notchcpu (npm)
- Aug 14, 2025
Malicious code in notatop (npm)
- Aug 14, 2025
Malicious code in nostego (npm)
- Aug 14, 2025
Malicious code in nosqleast (npm)
- Aug 14, 2025
Malicious code in northstar-sprite (npm)
- Aug 14, 2025
Malicious code in northpole (npm)
- Aug 14, 2025
Malicious code in norrin-statserver-reader (npm)
- Aug 14, 2025
Malicious code in norrin-logger (npm)
- Aug 14, 2025
Malicious code in norma-pegasus-start-sublimation (npm)
- Aug 14, 2025
Malicious code in norma-octans-neptune-child-process (npm)
- Aug 14, 2025
Malicious code in norma-csv-impulse-gatsby (npm)
- Aug 14, 2025
Malicious code in nooble (npm)
- Aug 14, 2025
Malicious code in nonzero (npm)
- Aug 14, 2025
Malicious code in nonsenso (npm)
- Aug 14, 2025
Malicious code in nongqhui (npm)
- Aug 14, 2025
Malicious code in non-blocking-wolf-umbra-gacrux (npm)
- Aug 14, 2025
Malicious code in non-blocking-eventhoriz-jabbah-jabbah (npm)
- Aug 14, 2025
Malicious code in non-blocking-antimatter-repository-fermion (npm)
- Aug 14, 2025
Malicious code in nomoruk (npm)
- Aug 14, 2025
Malicious code in nomokomo (npm)
- Aug 14, 2025
Malicious code in nomadmap (npm)
- Aug 14, 2025
Malicious code in nomabi (npm)
- Aug 14, 2025
Malicious code in nolabel (npm)
- Aug 14, 2025
Malicious code in noir_wy1pj_4hzbb_night (npm)
- Aug 14, 2025
Malicious code in noir_uyo7x_n0boo_aspen (npm)
- Aug 14, 2025
Malicious code in noir_sykqf_3hlj8_paradise (npm)
- Aug 14, 2025
Malicious code in noir_ni7jn_i2t1s_kryptonite (npm)
- Aug 14, 2025
Malicious code in noir_jdsv3_w1qm5_universe (npm)
- Aug 14, 2025
Malicious code in noir_fgyjp_arejz_dusk (npm)
- Aug 14, 2025
Malicious code in noir_7fmof_08vec_whisper (npm)
- Aug 14, 2025
Malicious code in noidea (npm)
- Aug 14, 2025
Malicious code in nogaptile (npm)
- Aug 14, 2025
Malicious code in nodus-quickstart (npm)
- Aug 14, 2025
Malicious code in nodules-user (npm)
- Aug 14, 2025
Malicious code in nodules-cache (npm)
- Aug 14, 2025
Malicious code in nodizecms (npm)
- Aug 14, 2025
Malicious code in nodexda (npm)
- Aug 14, 2025
Malicious code in nodeunit-shim (npm)
- Aug 14, 2025
Malicious code in nodetest199 (npm)
- Aug 14, 2025
Malicious code in nodetest1010 (npm)
- Aug 14, 2025
Malicious code in nodesimi (npm)
- Aug 14, 2025
Malicious code in nodes.js (npm)
- Aug 14, 2025
Malicious code in nodemon-terser-promise-mui (npm)
- Aug 14, 2025
Malicious code in nodemon-orogeny-shelljs-extremophile (npm)
- Aug 14, 2025
Malicious code in nodemon-iota-uninstall-octans (npm)
- Aug 14, 2025
Malicious code in nodemon-interstellarmedium-jovian-jekyll (npm)
- Aug 14, 2025
Malicious code in nodemon-extremophile-pulsar-polaris (npm)
- Aug 14, 2025
Malicious code in nodemon-electron-builder-babel-vega (npm)
- Aug 14, 2025
Malicious code in nodemedia (npm)
Page 5900 of 7,327