Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in iambtwob (npm)
- Aug 14, 2025
Malicious code in iafwjeqovtmnhcrk (npm)
- Aug 14, 2025
Malicious code in iadvice (npm)
- Aug 14, 2025
Malicious code in i_json (npm)
- Aug 14, 2025
Malicious code in i18next-xlsx-to-json (npm)
- Aug 14, 2025
Malicious code in i-knew-that (npm)
- Aug 14, 2025
Malicious code in hzrbqljeavcsnpkf (npm)
- Aug 14, 2025
Malicious code in hytb3nqln1s0tp3d7ygf2wnl9djb5emc (npm)
- Aug 14, 2025
Malicious code in hyrmedia (npm)
- Aug 14, 2025
Malicious code in hyptrails (npm)
- Aug 14, 2025
Malicious code in hypnosphi (npm)
- Aug 14, 2025
Malicious code in hypngqbzkmwjuiar (npm)
- Aug 14, 2025
Malicious code in hypertheme-matrix (npm)
- Aug 14, 2025
Malicious code in hyperjoy (npm)
- Aug 14, 2025
Malicious code in hyperion-spectron-webdriver-meteor-bulma (npm)
- Aug 14, 2025
Malicious code in hyperion-reveal-md-wasat-ganymede (npm)
- Aug 14, 2025
Malicious code in hyperion-koa-vuepress-zenith (npm)
- Aug 14, 2025
Malicious code in hyperion-graviton-filament-ionosphere (npm)
- Aug 14, 2025
Malicious code in hyperion-element-ui-google-link (npm)
- Aug 14, 2025
Malicious code in hyperion-concurrently-photon-metabolomics (npm)
- Aug 14, 2025
Malicious code in hyperion-buffer-centauri-express (npm)
- Aug 14, 2025
Malicious code in hyperion-baryon-fork-graphql (npm)
- Aug 14, 2025
Malicious code in hypc (npm)
- Aug 14, 2025
Malicious code in hyiot-module (npm)
- Aug 14, 2025
Malicious code in hydrogeology-transform-crust-library (npm)
- Aug 14, 2025
Malicious code in hydrogeology-primatology-galaxy-astrophysics (npm)
- Aug 14, 2025
Malicious code in hydrogeology-event-wezen-eris (npm)
- Aug 14, 2025
Malicious code in hydrogeology-darkmatter-achernar-inquirer (npm)
- Aug 14, 2025
Malicious code in hydrogen-ui-alpha (npm)
- Aug 14, 2025
Malicious code in hydrogen-react (npm)
- Aug 14, 2025
Malicious code in hydra-rollup-kuiperbelt-node-sass (npm)
- Aug 14, 2025
Malicious code in hydra-orogeny-nanotechnology-zenobia (npm)
- Aug 14, 2025
Malicious code in hydra-chalk-io-exec (npm)
- Aug 14, 2025
Malicious code in hydra-abiogenesis-auriga-decoherence (npm)
- Aug 14, 2025
Malicious code in hyctymbw (npm)
- Aug 14, 2025
Malicious code in hybliz (npm)
- Aug 14, 2025
Malicious code in hx9ehzesmiby2b0bcicrnno9m9l4agzz (npm)
- Aug 14, 2025
Malicious code in hwtbar (npm)
- Aug 14, 2025
Malicious code in hwriter (npm)
- Aug 14, 2025
Malicious code in hwonutkbfeigalqk (npm)
- Aug 14, 2025
Malicious code in hwdong (npm)
- Aug 14, 2025
Malicious code in hwatch (npm)
- Aug 14, 2025
Malicious code in hw-trnasport-u2f (npm)
- Aug 14, 2025
Malicious code in hw-tracking (npm)
- Aug 14, 2025
Malicious code in hw-timeout-layer (npm)
- Aug 14, 2025
Malicious code in hw-theme-rebrand (npm)
- Aug 14, 2025
Malicious code in hw-theme (npm)
- Aug 14, 2025
Malicious code in hw-tealium (npm)
- Aug 14, 2025
Malicious code in hw-survey (npm)
- Aug 14, 2025
Malicious code in hw-performance-tracking (npm)
Page 5534 of 6,634