Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,287 total · sorted newest first- Aug 14, 2025
Malicious code in netsuite-suitetalk-wsdl-v2019-2.0 (npm)
- Aug 14, 2025
Malicious code in netstruct (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in netpong (npm)
- Aug 14, 2025
Malicious code in netnuke (npm)
- Aug 14, 2025
Malicious code in netmodel (npm)
- Aug 14, 2025
Malicious code in netkut (npm)
- Aug 14, 2025
Malicious code in netivism (npm)
- Aug 14, 2025
Malicious code in netive (npm)
- Aug 14, 2025
Malicious code in nethaus (npm)
- Aug 14, 2025
Malicious code in netgate-mongoose (npm)
- Aug 14, 2025
Malicious code in netgate (npm)
- Aug 14, 2025
Malicious code in netcamel (npm)
- Aug 14, 2025
Malicious code in netboing (npm)
- Aug 14, 2025
Malicious code in netbird (npm)
- Aug 14, 2025
Malicious code in nestjs-uranology-virgo-proxima (npm)
- Aug 14, 2025
Malicious code in nestjs-celeste-proxima-antares (npm)
- Aug 14, 2025
Malicious code in nestjs-betelgeuse-xml-polaris (npm)
- Aug 14, 2025
Malicious code in nested-dependencies (npm)
- Aug 14, 2025
Malicious code in nessdev (npm)
- Aug 14, 2025
Malicious code in nerf-page-config-generator (npm)
- Aug 14, 2025
Malicious code in nerdzapi (npm)
- Aug 14, 2025
Malicious code in nercomp (npm)
- Aug 14, 2025
Malicious code in neptunology-test-meteor-oauth (npm)
- Aug 14, 2025
Malicious code in neptunology-mensa-tectonophysics-less (npm)
- Aug 14, 2025
Malicious code in neptunology-gacrux-mechatronics-sedimentology (npm)
- Aug 14, 2025
Malicious code in neptunology-chalk-server-parsec (npm)
- Aug 14, 2025
Malicious code in neptune-tool-postcss-publish (npm)
- Aug 14, 2025
Malicious code in neptune-private-mineralogy-inflation (npm)
- Aug 14, 2025
Malicious code in neptune-nightwatch-ultra-neutronstar (npm)
- Aug 14, 2025
Malicious code in neptune-nhk63-537du-jungle-project (npm)
- Aug 14, 2025
Malicious code in neptune-meteor-oscillation-metalsmith (npm)
- Aug 14, 2025
Malicious code in neptune-markdown-pdf-ora-dotenv-safe (npm)
- Aug 14, 2025
Malicious code in neptune-lyra-cosmochemistry-markdownlint (npm)
- Aug 14, 2025
Malicious code in neptune-iota-bioinformatics-technosignature (npm)
- Aug 14, 2025
Malicious code in neptune-impulse-algol-puppeteer (npm)
- Aug 14, 2025
Malicious code in neptune-hermes-taurus-reveal-md (npm)
- Aug 14, 2025
Malicious code in neptune-config-grunt-darkenergy (npm)
- Aug 14, 2025
Malicious code in neptune-charon-cross-env-astrometry (npm)
- Aug 14, 2025
Malicious code in neptune-9sv39-bkqlw-meadow-project (npm)
- Aug 14, 2025
Malicious code in neoxide (npm)
- Aug 14, 2025
Malicious code in neos-theme (npm)
- Aug 14, 2025
Malicious code in neomatch (npm)
- Aug 14, 2025
Malicious code in neobill (npm)
- Aug 14, 2025
Malicious code in nennyu (npm)
- Aug 14, 2025
Malicious code in nemail (npm)
- Aug 14, 2025
Malicious code in nekohoshi (npm)
- Aug 14, 2025
Malicious code in neilapp (npm)
- Aug 14, 2025
Malicious code in neihan (npm)
- Aug 14, 2025
Malicious code in nei-hbs (npm)
- Aug 14, 2025
Malicious code in nehsaa (npm)
Page 5908 of 7,326