Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in hw-olab (npm)
- Aug 14, 2025
Malicious code in hw-me (npm)
- Aug 14, 2025
Malicious code in hw-marketing (npm)
- Aug 14, 2025
Malicious code in hw-intl (npm)
- Aug 14, 2025
Malicious code in hw-interstitial (npm)
- Aug 14, 2025
Malicious code in hw-intent-media (npm)
- Aug 14, 2025
Malicious code in hw-exception (npm)
- Aug 14, 2025
Malicious code in hw-customer-stats (npm)
- Aug 14, 2025
Malicious code in hw-currency (npm)
- Aug 14, 2025
Malicious code in hw-clientid (npm)
- Aug 14, 2025
Malicious code in hw-branding (npm)
- Aug 14, 2025
Malicious code in hw-banner (npm)
- Aug 14, 2025
Malicious code in hw-api-secret (npm)
- Aug 14, 2025
Malicious code in hw-angular-validator (npm)
- Aug 14, 2025
Malicious code in hw-affiliate-toast (npm)
- Aug 14, 2025
Malicious code in hustlejs (npm)
- Aug 14, 2025
Malicious code in huskyos (npm)
- Aug 14, 2025
Malicious code in husky-zenith-less-yonder (npm)
- Aug 14, 2025
Malicious code in husky-stratigraphy-gravity-orogeny (npm)
- Aug 14, 2025
Malicious code in husky-library-janus-supervisor (npm)
- Aug 14, 2025
Malicious code in hush_hptfz_u1ddr_valley (npm)
- Aug 14, 2025
Malicious code in hurge (npm)
- Aug 14, 2025
Malicious code in huqas_web (npm)
- Aug 14, 2025
Malicious code in huobi-trading-view-hbcloud (npm)
- Aug 14, 2025
Malicious code in huobi-bs-fe-common (npm)
- Aug 14, 2025
Malicious code in hunters (npm)
- Aug 14, 2025
Malicious code in hungarian (npm)
- Aug 14, 2025
Malicious code in hunexdlwgsybpizf (npm)
- Aug 14, 2025
Malicious code in hummawawa (npm)
- Aug 14, 2025
Malicious code in humanapi-mongoose-list (npm)
- Aug 14, 2025
Malicious code in humanapi-mongoose-encrypt (npm)
- Aug 14, 2025
Malicious code in humanapi-models (npm)
- Aug 14, 2025
Malicious code in humanapi-logger (npm)
- Aug 14, 2025
Malicious code in humanapi-grunt-tasks (npm)
- Aug 14, 2025
Malicious code in humanapi-belt (npm)
- Aug 14, 2025
Malicious code in hulp (npm)
- Aug 14, 2025
Malicious code in hulasync (npm)
- Aug 14, 2025
Malicious code in hukax (npm)
- Aug 14, 2025
Malicious code in huiguan (npm)
- Aug 14, 2025
Malicious code in hugomatic (npm)
- Aug 14, 2025
Malicious code in hugo-thermosphere-nebula-spectroscopy (npm)
- Aug 14, 2025
Malicious code in hugo-neptune-config-mineralogy (npm)
- Aug 14, 2025
Malicious code in hugo-fornax-neptune-playwright (npm)
- Aug 14, 2025
Malicious code in hugo-draco-mini-css-extract-plugin-paleoanthropology (npm)
- Aug 14, 2025
Malicious code in hugo-changelog-achernar-event (npm)
- Aug 14, 2025
Malicious code in hugehard (npm)
- Aug 14, 2025
Malicious code in hufnagel (npm)
- Aug 14, 2025
Malicious code in huflungdu (npm)
- Aug 14, 2025
Malicious code in huffpost (npm)
- Aug 14, 2025
Malicious code in huf_secure_access_api (npm)
Page 5535 of 6,634