Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in hotel-banana-fmhr (npm)
- Aug 14, 2025
Malicious code in hotel-apple-banana-bdaxu (npm)
- Aug 14, 2025
Malicious code in hotel-ab7-project (npm)
- Aug 14, 2025
Malicious code in hotel-5wp-project (npm)
- Aug 14, 2025
Malicious code in hotel-4w1-project (npm)
- Aug 14, 2025
Malicious code in hotel-2hp-project (npm)
- Aug 14, 2025
Malicious code in hotel-03v-project (npm)
- Aug 14, 2025
Malicious code in hotbeer (npm)
- Aug 14, 2025
Malicious code in hot-decrypt-private-orchestrate-tau (npm)
- Aug 14, 2025
Malicious code in hot-air-thread-minify-assert (npm)
- Aug 14, 2025
Malicious code in hostname_chacker (npm)
- Aug 14, 2025
Malicious code in hosted-hubot (npm)
- Aug 14, 2025
Malicious code in host-demo (npm)
- Aug 14, 2025
Malicious code in horseradish-yam-7jib (npm)
- Aug 14, 2025
Malicious code in horseradish-watermelon-f06z (npm)
- Aug 14, 2025
Malicious code in horseradish-supernova-9uzi (npm)
- Aug 14, 2025
Malicious code in horseradish-shack-oqi7 (npm)
- Aug 14, 2025
Malicious code in horseradish-quinoa-cths (npm)
- Aug 14, 2025
Malicious code in horseradish-heliosphere-bjo7 (npm)
- Aug 14, 2025
Malicious code in horseradish-ginger-1r1f (npm)
- Aug 14, 2025
Malicious code in horseradish-elderberry-ll0r (npm)
- Aug 14, 2025
Malicious code in horizon_ydbzk_xdkpx_trill (npm)
- Aug 14, 2025
Malicious code in horizon_tsmnl_vbm7p_unicorn (npm)
- Aug 14, 2025
Malicious code in horizon_oiwy1_2qofz_dream (npm)
- Aug 14, 2025
Malicious code in horizon_ev4uw_9dmsw_snow (npm)
- Aug 14, 2025
Malicious code in horizon_e4emh_cpwvt_ultraviolet (npm)
- Aug 14, 2025
Malicious code in horizon_arlxn_4xc4j_quasar (npm)
- Aug 14, 2025
Malicious code in horizon_3m5i5_d5cgm_hush (npm)
- Aug 14, 2025
Malicious code in horizon_0cirm_dz4mp_giraffe (npm)
- Aug 14, 2025
Malicious code in horizon-xylophone-fsj386-project (npm)
- Aug 14, 2025
Malicious code in horizon-vdqrx-5z7dm-ember-project (npm)
- Aug 14, 2025
Malicious code in horizon-utgdy-61qus-mystic-project (npm)
- Aug 14, 2025
Malicious code in horizon-sp (npm)
- Aug 14, 2025
Malicious code in horizon-octopus-rhk645-project (npm)
- Aug 14, 2025
Malicious code in horizon-mebjh-bw69m-song-project (npm)
- Aug 14, 2025
Malicious code in horizon-jc8hn-tnmjo-comet-project (npm)
- Aug 14, 2025
Malicious code in horizon-he4a0-y31v1-karma-project (npm)
- Aug 14, 2025
Malicious code in horizon-gorilla-zst235-project (npm)
- Aug 14, 2025
Malicious code in horizon-fr53a-wyawp-frost-project (npm)
- Aug 14, 2025
Malicious code in horizon-fern-syz975-project (npm)
- Aug 14, 2025
Malicious code in horizon-fern-bro318-project (npm)
- Aug 14, 2025
Malicious code in horizon-dragon-khi299-project (npm)
- Aug 14, 2025
Malicious code in horizon-df4f1-ig352-juniper-project (npm)
- Aug 14, 2025
Malicious code in horizon-7q1v0-dpx1u-nebula-project (npm)
- Aug 14, 2025
Malicious code in horadric.js (npm)
- Aug 14, 2025
Malicious code in hoptimist (npm)
- Aug 14, 2025
Malicious code in hopital (npm)
- Aug 14, 2025
Malicious code in hope-widget-xyz (npm)
- Aug 14, 2025
Malicious code in hoonshow (npm)
- Aug 14, 2025
Malicious code in hoomba (npm)
Page 5538 of 6,634