Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in hookie.js (npm)
- Aug 14, 2025
Malicious code in hooka-tools (npm)
- Aug 14, 2025
Malicious code in hook-listen-test (npm)
- Aug 14, 2025
Malicious code in hoodstats (npm)
- Aug 14, 2025
Malicious code in honrphys (npm)
- Aug 14, 2025
Malicious code in honeydew-yankee-ubpq (npm)
- Aug 14, 2025
Malicious code in honeydew-yankee-mthv (npm)
- Aug 14, 2025
Malicious code in honeydew-yankee-bravo-wjosv (npm)
- Aug 14, 2025
Malicious code in honeydew-xray-papa-xntxv (npm)
- Aug 14, 2025
Malicious code in honeydew-xqz-project (npm)
- Aug 14, 2025
Malicious code in honeydew-xigua-ieqf (npm)
- Aug 14, 2025
Malicious code in honeydew-xigua-gqho (npm)
- Aug 14, 2025
Malicious code in honeydew-xigua-aynr (npm)
- Aug 14, 2025
Malicious code in honeydew-vvb-project (npm)
- Aug 14, 2025
Malicious code in honeydew-victor-november-ibkty (npm)
- Aug 14, 2025
Malicious code in honeydew-victor-cherry-lalwt (npm)
- Aug 14, 2025
Malicious code in honeydew-vanilla-xigua-injij (npm)
- Aug 14, 2025
Malicious code in honeydew-vanilla-c6ge (npm)
- Aug 14, 2025
Malicious code in honeydew-va5-project (npm)
- Aug 14, 2025
Malicious code in honeydew-ugli-5jbd (npm)
- Aug 14, 2025
Malicious code in honeydew-tangerine-xray-heqld (npm)
- Aug 14, 2025
Malicious code in honeydew-tangerine-whiskey-ormij (npm)
- Aug 14, 2025
Malicious code in honeydew-romeo-nzgg (npm)
- Aug 14, 2025
Malicious code in honeydew-rjx-project (npm)
- Aug 14, 2025
Malicious code in honeydew-rj9-project (npm)
- Aug 14, 2025
Malicious code in honeydew-raspberry-lcxj (npm)
- Aug 14, 2025
Malicious code in honeydew-quebec-xdpl (npm)
- Aug 14, 2025
Malicious code in honeydew-pqv-project (npm)
- Aug 14, 2025
Malicious code in honeydew-papaya-kjuh (npm)
- Aug 14, 2025
Malicious code in honeydew-orange-vnin (npm)
- Aug 14, 2025
Malicious code in honeydew-orange-juliet-yroxo (npm)
- Aug 14, 2025
Malicious code in honeydew-orange-isyn (npm)
- Aug 14, 2025
Malicious code in honeydew-oe7-project (npm)
- Aug 14, 2025
Malicious code in honeydew-nzj-project (npm)
- Aug 14, 2025
Malicious code in honeydew-nutmeg-wc4w (npm)
- Aug 14, 2025
Malicious code in honeydew-november-rnbx (npm)
- Aug 14, 2025
Malicious code in honeydew-n6l-project (npm)
- Aug 14, 2025
Malicious code in honeydew-mike-zulu-ncvvt (npm)
- Aug 14, 2025
Malicious code in honeydew-mike-ltcl (npm)
- Aug 14, 2025
Malicious code in honeydew-mango-57pl (npm)
- Aug 14, 2025
Malicious code in honeydew-lemon-olij (npm)
- Aug 14, 2025
Malicious code in honeydew-l9d-project (npm)
- Aug 14, 2025
Malicious code in honeydew-kkf-project (npm)
- Aug 14, 2025
Malicious code in honeydew-kilo-kiwi-qhdhe (npm)
- Aug 14, 2025
Malicious code in honeydew-juliet-delta-umiqg (npm)
- Aug 14, 2025
Malicious code in honeydew-iceberg-gelu (npm)
- Aug 14, 2025
Malicious code in honeydew-grape-lrdy (npm)
- Aug 14, 2025
Malicious code in honeydew-golf-gkqb (npm)
- Aug 14, 2025
Malicious code in honeydew-f57-project (npm)
- Aug 14, 2025
Malicious code in honeydew-ekg-project (npm)
Page 5539 of 6,634