Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,300 total · sorted newest first- Aug 14, 2025
Malicious code in nimbus-emerald-cma374-project (npm)
- Aug 14, 2025
Malicious code in nimbus-aspen-vok697-project (npm)
- Aug 14, 2025
Malicious code in nimblyci (npm)
- Aug 14, 2025
Malicious code in nilstripe (npm)
- Aug 14, 2025
Malicious code in nike-hercules (npm)
- Aug 14, 2025
Malicious code in nightwatch-warp-antares-sagitta (npm)
- Aug 14, 2025
Malicious code in nightwatch-steganography-hapi-warp (npm)
- Aug 14, 2025
Malicious code in nightwatch-publish-lynx-quark (npm)
- Aug 14, 2025
Malicious code in nightwatch-nodejs-run-script-castor (npm)
- Aug 14, 2025
Malicious code in nightwatch-halley-proxima-cache (npm)
- Aug 14, 2025
Malicious code in nightwatch-andromeda-dotenv-safe-figures (npm)
- Aug 14, 2025
Malicious code in NightPro-Web (npm)
- Aug 14, 2025
Malicious code in nightmare-titan-buffer-titan (npm)
- Aug 14, 2025
Malicious code in nightmare-markdownlint-resolvers-frontend (npm)
- Aug 14, 2025
Malicious code in nightmare-config-lepton-telesto (npm)
- Aug 14, 2025
Malicious code in nightly_builds (npm)
- Aug 14, 2025
Malicious code in nightingale-yambean-k21w (npm)
- Aug 14, 2025
Malicious code in nightingale-whiskey-ex3l (npm)
- Aug 14, 2025
Malicious code in nightingale-rainbow-hg5s (npm)
- Aug 14, 2025
Malicious code in nightingale-jalapeno-qh2f (npm)
- Aug 14, 2025
Malicious code in nightingale-comet-y4oa (npm)
- Aug 14, 2025
Malicious code in nightingale-beetroot-3867 (npm)
- Aug 14, 2025
Malicious code in night_qu1qa_h5z0a_drizzle (npm)
- Aug 14, 2025
Malicious code in night_qbwdy_bkz4k_rainbow (npm)
- Aug 14, 2025
Malicious code in night_nhfqp_hssjn_kryptonite (npm)
- Aug 14, 2025
Malicious code in night_lztkw_23llz_snow (npm)
- Aug 14, 2025
Malicious code in night_htpqn_babqa_xenolith (npm)
- Aug 14, 2025
Malicious code in night_e3baf_0q0ph_glacier (npm)
- Aug 14, 2025
Malicious code in night_asogv_78bqo_aspen (npm)
- Aug 14, 2025
Malicious code in night_akr3h_os9hy_serenade (npm)
- Aug 14, 2025
Malicious code in night-i8gx0-5vwos-pinnacle-project (npm)
- Aug 14, 2025
Malicious code in night-bwpnj-4ygqa-quill-project (npm)
- Aug 14, 2025
Malicious code in night-4ocdw-8st6g-boulder-project (npm)
- Aug 14, 2025
Malicious code in night-4m111-bsrd8-coral-project (npm)
- Aug 14, 2025
Malicious code in night-2jjoo-2tfif-xanadu-project (npm)
- Aug 14, 2025
Malicious code in nigdje (npm)
- Aug 14, 2025
Malicious code in nift-contract-viewer (npm)
- Aug 14, 2025
Malicious code in nidawork (npm)
- Aug 14, 2025
Malicious code in nicolasss (npm)
- Aug 14, 2025
Malicious code in nickalis (npm)
- Aug 14, 2025
Malicious code in nicerest (npm)
- Aug 14, 2025
Malicious code in ni-node-devtools (npm)
- Aug 14, 2025
Malicious code in nhsbugs (npm)
- Aug 14, 2025
Malicious code in nhlscrapi (npm)
- Aug 14, 2025
Malicious code in nhangman (npm)
- Aug 14, 2025
Malicious code in ngx-translatexxx (npm)
- Aug 14, 2025
Malicious code in ngx-top (npm)
- Aug 14, 2025
Malicious code in ngx-qrscanner (npm)
- Aug 14, 2025
Malicious code in ngx-material-keyboard (npm)
- Aug 14, 2025
Malicious code in ngx-i2e-user-profile (npm)
Page 5904 of 7,326