Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Aug 14, 2025
Malicious code in nana-esdoger69-breki (npm)
- Aug 14, 2025
Malicious code in nampnq (npm)
- Aug 14, 2025
Malicious code in NAME (npm)
- Aug 14, 2025
Malicious code in nakupujem (npm)
- Aug 14, 2025
Malicious code in nakloggg (npm)
- Aug 14, 2025
Malicious code in nakjava (npm)
- Aug 14, 2025
Malicious code in naivbzlpcjtfqkrd (npm)
- Aug 14, 2025
Malicious code in nailette (npm)
- Aug 14, 2025
Malicious code in nagibabel (npm)
- Aug 14, 2025
Malicious code in nagaraj (npm)
- Aug 14, 2025
Malicious code in nadir_component (npm)
- Aug 14, 2025
Malicious code in nadia-teh93-sukiwir (npm)
- Aug 14, 2025
Malicious code in nadia-semur13-breki (npm)
- Aug 14, 2025
Malicious code in nadia-sambel12-breki (npm)
- Aug 14, 2025
Malicious code in nadia-naget79-sukiwir (npm)
- Aug 14, 2025
Malicious code in nadia-mieayam91-breki (npm)
- Aug 14, 2025
Malicious code in nadia-mieayam55-sukiwir (npm)
- Aug 14, 2025
Malicious code in nadia-mangga100-kuki (npm)
- Aug 14, 2025
Malicious code in nadia-kripik33-sukiwir (npm)
- Aug 14, 2025
Malicious code in nadia-jus72-breki (npm)
- Aug 14, 2025
Malicious code in nadia-jamblang80-breki (npm)
- Aug 14, 2025
Malicious code in nadia-bakwan56-sukiwir (npm)
- Aug 14, 2025
Malicious code in naabscan (npm)
- Aug 14, 2025
Malicious code in n8n-nodes-msdyn365bc (npm)
- Aug 14, 2025
Malicious code in n5q1lb (npm)
- Aug 14, 2025
Malicious code in n3-ux (npm)
- Aug 14, 2025
Malicious code in n1-avatars (npm)
- Aug 14, 2025
Malicious code in n-safe-logger (npm)
- Aug 14, 2025
Malicious code in n-landing (npm)
- Aug 14, 2025
Malicious code in mzodal (npm)
- Aug 14, 2025
Malicious code in mz-vue-datepicker (npm)
- Aug 14, 2025
Malicious code in mz-require (npm)
- Aug 14, 2025
Malicious code in myyntikone-cal-traintypes (npm)
- Aug 14, 2025
Malicious code in myyntikone-cal-tickets (npm)
- Aug 14, 2025
Malicious code in mywebapps (npm)
- Aug 14, 2025
Malicious code in mytwist (npm)
- Aug 14, 2025
Malicious code in mytrlog (npm)
- Aug 14, 2025
Malicious code in mytrelloa (npm)
- Aug 14, 2025
Malicious code in mytonling (npm)
- Aug 14, 2025
Malicious code in mythquiz (npm)
- Aug 14, 2025
Malicious code in mythidiff-api (npm)
- Aug 14, 2025
Malicious code in myth-zodiac-rhm470-project (npm)
- Aug 14, 2025
Malicious code in myth-vista-ayv259-project (npm)
- Aug 14, 2025
Malicious code in myth-reef-bio561-project (npm)
- Aug 14, 2025
Malicious code in myth-penguin-uwe917-project (npm)
- Aug 14, 2025
Malicious code in myth-nebula-jro274-project (npm)
- Aug 14, 2025
Malicious code in myth-lava-flt044-project (npm)
- Aug 14, 2025
Malicious code in myth-jungle-tkx138-project (npm)
- Aug 14, 2025
Malicious code in myth-island-pwa552-project (npm)
- Aug 14, 2025
Malicious code in myth-fern-jew475-project (npm)
Page 5913 of 7,326