Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in honey-infinity-ooh364-project (npm)
- Aug 14, 2025
Malicious code in honey-cliff-tnd256-project (npm)
- Aug 14, 2025
Malicious code in honey-acorn-pec137-project (npm)
- Aug 14, 2025
Malicious code in homomaid (npm)
- Aug 14, 2025
Malicious code in homoglyphs (npm)
- Aug 14, 2025
Malicious code in homey-device-discovery (npm)
- Aug 14, 2025
Malicious code in homework-module-14 (npm)
- Aug 14, 2025
Malicious code in homepod (npm)
- Aug 14, 2025
Malicious code in homematic-js-km200 (npm)
- Aug 14, 2025
Malicious code in homebridge-platform-smartac-f659675 (npm)
- Aug 14, 2025
Malicious code in homebridge-dyson (npm)
- Aug 14, 2025
Malicious code in homebridge-433mhz-light (npm)
- Aug 14, 2025
Malicious code in home-device-inventory (npm)
- Aug 14, 2025
Malicious code in homals (npm)
- Aug 14, 2025
Malicious code in holography-heka-mesosphere-biomimicry (npm)
- Aug 14, 2025
Malicious code in holography-ganymede-proxima-hexo (npm)
- Aug 14, 2025
Malicious code in holography-entanglement-ignite-chalk (npm)
- Aug 14, 2025
Malicious code in holography-charon-axios-development (npm)
- Aug 14, 2025
Malicious code in hologramm (npm)
- Aug 14, 2025
Malicious code in hologram-taurus-lightyear-auth0 (npm)
- Aug 14, 2025
Malicious code in hologram-oscillation-rehype-await (npm)
- Aug 14, 2025
Malicious code in hologram-meteor-scorpius-jabbah (npm)
- Aug 14, 2025
Malicious code in hologram-ini-elara-dysonswarm (npm)
- Aug 14, 2025
Malicious code in hologram-cors-quito-string (npm)
- Aug 14, 2025
Malicious code in hollywood-hdtv-shield-server (npm)
- Aug 14, 2025
Malicious code in hollow-waterfall-bez687-project (npm)
- Aug 14, 2025
Malicious code in hollow-utopia-sex755-project (npm)
- Aug 14, 2025
Malicious code in hollow-umbra-xdi001-project (npm)
- Aug 14, 2025
Malicious code in hollow-tornado-itq402-project (npm)
- Aug 14, 2025
Malicious code in hollow-moose-aeu448-project (npm)
- Aug 14, 2025
Malicious code in hollow-lagoon-xew578-project (npm)
- Aug 14, 2025
Malicious code in hollow-falcon-gzs027-project (npm)
- Aug 14, 2025
Malicious code in hollow-elephant-rdz573-project (npm)
- Aug 14, 2025
Malicious code in hollow-ecosystem-rth157-project (npm)
- Aug 14, 2025
Malicious code in hollow-dewdrop-aic413-project (npm)
- Aug 14, 2025
Malicious code in hollow-asteroid-svq681-project (npm)
- Aug 14, 2025
Malicious code in holhos (npm)
- Aug 14, 2025
Malicious code in holesaw (npm)
- Aug 14, 2025
Malicious code in holdingread-paypal (npm)
- Aug 14, 2025
Malicious code in hockeygm (npm)
- Aug 14, 2025
Malicious code in hocizrfnkskmvygw (npm)
- Aug 14, 2025
Malicious code in hoauth (npm)
- Aug 14, 2025
Malicious code in hn-facets-ng-core (npm)
- Aug 14, 2025
Malicious code in hmtqkr (npm)
- Aug 14, 2025
Malicious code in hm-graphs (npm)
- Aug 14, 2025
Malicious code in hltstudy (npm)
- Aug 14, 2025
Malicious code in hlscore (npm)
- Aug 14, 2025
Malicious code in hl7.fhir.us.davinci-hrex (npm)
- Aug 14, 2025
Malicious code in hl7.fhir.us.core (npm)
- Aug 14, 2025
Malicious code in hl7.fhir.r4.core (npm)
Page 5541 of 6,634