Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,300 total · sorted newest first- Aug 14, 2025
Malicious code in node-memory-stream (npm)
- Aug 14, 2025
Malicious code in node-lolibooru (npm)
- Aug 14, 2025
Malicious code in node-log-stream (npm)
- Aug 14, 2025
Malicious code in node-laravel-session-ahss-testing (npm)
- Aug 14, 2025
Malicious code in node-keyval-httpget (npm)
- Aug 14, 2025
Malicious code in node-jlink (npm)
- Aug 14, 2025
Malicious code in node-http-langdetect (npm)
- Aug 14, 2025
Malicious code in node-heatpipe-publisher (npm)
- Aug 14, 2025
Malicious code in node-ftp (npm)
- Aug 14, 2025
Malicious code in node-freefare (npm)
- Aug 14, 2025
Malicious code in node-firefox-find-wifi-devices (npm)
- Aug 14, 2025
Malicious code in node-file-uploader (npm)
- Aug 14, 2025
Malicious code in node-ffmpeg-win32-x64 (npm)
- Aug 14, 2025
Malicious code in node-ffmpeg-win32-ia32 (npm)
- Aug 14, 2025
Malicious code in node-fethc (npm)
- Aug 14, 2025
Malicious code in node-fecth (npm)
- Aug 14, 2025
Malicious code in node-fecht (npm)
- Aug 14, 2025
Malicious code in node-earth-static-reject-xml (npm)
- Aug 14, 2025
Malicious code in node-config-scripts-cassini-dynamo (npm)
- Aug 14, 2025
Malicious code in node-config-rest-grus-taurus (npm)
- Aug 14, 2025
Malicious code in node-config-express-sagitta-loopback (npm)
- Aug 14, 2025
Malicious code in node-cip (npm)
- Aug 14, 2025
Malicious code in node-carweb-api (npm)
- Aug 14, 2025
Malicious code in node-cache-manager-hazelcast (npm)
- Aug 14, 2025
Malicious code in node-buc (npm)
- Aug 14, 2025
Malicious code in node-box-config (npm)
- Aug 14, 2025
Malicious code in node-backup (npm)
- Aug 14, 2025
Malicious code in node-api-test (npm)
- Aug 14, 2025
Malicious code in node-antivir (npm)
- Aug 14, 2025
Malicious code in node-3d-core-raub (npm)
- Aug 14, 2025
Malicious code in nocturne-zenith-stw029-project (npm)
- Aug 14, 2025
Malicious code in nocturne-yellow-aac531-project (npm)
- Aug 14, 2025
Malicious code in nocturne-wisp-xmh536-project (npm)
- Aug 14, 2025
Malicious code in nocturne-umbrella-oey938-project (npm)
- Aug 14, 2025
Malicious code in nocturne-topaz-iim637-project (npm)
- Aug 14, 2025
Malicious code in nocturne-tide-okg822-project (npm)
- Aug 14, 2025
Malicious code in nocturne-quilt-fqe949-project (npm)
- Aug 14, 2025
Malicious code in nocturne-opaline-xum329-project (npm)
- Aug 14, 2025
Malicious code in nocturne-nugget-tgy502-project (npm)
- Aug 14, 2025
Malicious code in nocturne-kite-oim992-project (npm)
- Aug 14, 2025
Malicious code in nocturne-jasmine-ssc313-project (npm)
- Aug 14, 2025
Malicious code in nocturne-iguana-mug695-project (npm)
- Aug 14, 2025
Malicious code in nocturne-gorge-gyj086-project (npm)
- Aug 14, 2025
Malicious code in nocturne-giraffe-gyl185-project (npm)
- Aug 14, 2025
Malicious code in nocturne-falcon-gsb275-project (npm)
- Aug 14, 2025
Malicious code in nocturne-cat-frk573-project (npm)
- Aug 14, 2025
Malicious code in no-one-left-behind (npm)
- Aug 14, 2025
Malicious code in no-deps-scripted-to-fail (npm)
- Aug 14, 2025
Malicious code in nnioslib (npm)
- Aug 14, 2025
Malicious code in nmqyma (npm)
Page 5902 of 7,326