Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in hoverpuck (npm)
- Aug 14, 2025
Malicious code in housefind (npm)
- Aug 14, 2025
Malicious code in hottg47gggg (npm)
- Aug 14, 2025
Malicious code in hotline-frontend (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in HotJS (npm)
- Aug 14, 2025
Malicious code in hotelsys (npm)
- Aug 14, 2025
Malicious code in hotel-zucchini-sierra-ehqmk (npm)
- Aug 14, 2025
Malicious code in hotel-xray-pjod (npm)
- Aug 14, 2025
Malicious code in hotel-xigua-nfoh (npm)
- Aug 14, 2025
Malicious code in hotel-xgw-project (npm)
- Aug 14, 2025
Malicious code in hotel-xenon-m0k3 (npm)
- Aug 14, 2025
Malicious code in hotel-whiskey-alpha-qwqlo (npm)
- Aug 14, 2025
Malicious code in hotel-v6f-project (npm)
- Aug 14, 2025
Malicious code in hotel-u7v-project (npm)
- Aug 14, 2025
Malicious code in hotel-strawberry-lemon-cfqzi (npm)
- Aug 14, 2025
Malicious code in hotel-romeo-ifxx (npm)
- Aug 14, 2025
Malicious code in hotel-re0-project (npm)
- Aug 14, 2025
Malicious code in hotel-raspberry-uogt (npm)
- Aug 14, 2025
Malicious code in hotel-pr7-project (npm)
- Aug 14, 2025
Malicious code in hotel-oscar-fig-hmfhw (npm)
- Aug 14, 2025
Malicious code in hotel-o8p-project (npm)
- Aug 14, 2025
Malicious code in hotel-o0e-project (npm)
- Aug 14, 2025
Malicious code in hotel-nl6-project (npm)
- Aug 14, 2025
Malicious code in hotel-mike-zucchini-tbpst (npm)
- Aug 14, 2025
Malicious code in hotel-mango-ypoo (npm)
- Aug 14, 2025
Malicious code in hotel-lima-tango-xcygz (npm)
- Aug 14, 2025
Malicious code in hotel-l19-project (npm)
- Aug 14, 2025
Malicious code in hotel-kiwi-22a8 (npm)
- Aug 14, 2025
Malicious code in hotel-kilo-jrme (npm)
- Aug 14, 2025
Malicious code in hotel-k7n-project (npm)
- Aug 14, 2025
Malicious code in hotel-k2x-project (npm)
- Aug 14, 2025
Malicious code in hotel-juliet-yyno (npm)
- Aug 14, 2025
Malicious code in hotel-juliet-udfh (npm)
- Aug 14, 2025
Malicious code in hotel-india-ihhi (npm)
- Aug 14, 2025
Malicious code in hotel-honeydew-qjlt (npm)
- Aug 14, 2025
Malicious code in hotel-helicopter-rzk6 (npm)
- Aug 14, 2025
Malicious code in hotel-h1p-project (npm)
- Aug 14, 2025
Malicious code in hotel-golf-lmol (npm)
- Aug 14, 2025
Malicious code in hotel-fig-ewgs (npm)
- Aug 14, 2025
Malicious code in hotel-f63-project (npm)
- Aug 14, 2025
Malicious code in hotel-etm-project (npm)
- Aug 14, 2025
Malicious code in hotel-elderberry-vsgz (npm)
- Aug 14, 2025
Malicious code in hotel-elderberry-tangerine-vpmde (npm)
- Aug 14, 2025
Malicious code in hotel-elderberry-hhou (npm)
- Aug 14, 2025
Malicious code in hotel-echo-papaya-rfurx (npm)
- Aug 14, 2025
Malicious code in hotel-echo-date-woscz (npm)
- Aug 14, 2025
Malicious code in hotel-czu-project (npm)
- Aug 14, 2025
Malicious code in hotel-cld-project (npm)
- Aug 14, 2025
Malicious code in hotel-c43-project (npm)
- Aug 14, 2025
Malicious code in hotel-byc-project (npm)
Page 5537 of 6,634