Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in hktoolkit (npm)
- Aug 14, 2025
Malicious code in hkpmfygezqtjdras (npm)
- Aug 14, 2025
Malicious code in hkjfhgdk (npm)
- Aug 14, 2025
Malicious code in hkjdfhdsfhjkhsdfkhg (npm)
- Aug 14, 2025
Malicious code in hkit (npm)
- Aug 14, 2025
Malicious code in hkhkhk (npm)
- Aug 14, 2025
Malicious code in hkdoekpmlfcjygtx (npm)
- Aug 14, 2025
Malicious code in hkbudget (npm)
- Aug 14, 2025
Malicious code in hkaga-ana (npm)
- Aug 14, 2025
Malicious code in hkaga-ama (npm)
- Aug 14, 2025
Malicious code in hjvgvgggx (npm)
- Aug 14, 2025
Malicious code in hjrivaeclknbouyf (npm)
- Aug 14, 2025
Malicious code in hjgsawkkrqdivxeo (npm)
- Aug 14, 2025
Malicious code in hiwaydb (npm)
- Aug 14, 2025
Malicious code in hivemed-logic (npm)
- Aug 14, 2025
Malicious code in hitler (npm)
- Aug 14, 2025
Malicious code in hitground (npm)
- Aug 14, 2025
Malicious code in histories (npm)
- Aug 14, 2025
Malicious code in histonat (npm)
- Aug 14, 2025
Malicious code in hiredo (npm)
- Aug 14, 2025
Malicious code in hirake (npm)
- Aug 14, 2025
Malicious code in hiptime (npm)
- Aug 14, 2025
Malicious code in hipstest (npm)
- Aug 14, 2025
Malicious code in hipsterbg (npm)
- Aug 14, 2025
Malicious code in hippocms (npm)
- Aug 14, 2025
Malicious code in hipmunk (npm)
- Aug 14, 2025
Malicious code in hiplib (npm)
- Aug 14, 2025
Malicious code in hiot-messaging (npm)
- Aug 14, 2025
Malicious code in hiot-api (npm)
- Aug 14, 2025
Malicious code in himoysimi (npm)
- Aug 14, 2025
Malicious code in hill-undertow-dhf073-project (npm)
- Aug 14, 2025
Malicious code in hill-tornado-pds437-project (npm)
- Aug 14, 2025
Malicious code in hill-thistle-rdk333-project (npm)
- Aug 14, 2025
Malicious code in hill-quasar-ubz623-project (npm)
- Aug 14, 2025
Malicious code in hill-quartz-ysz022-project (npm)
- Aug 14, 2025
Malicious code in hill-nugget-xok455-project (npm)
- Aug 14, 2025
Malicious code in hill-gorge-huh825-project (npm)
- Aug 14, 2025
Malicious code in hill-ecosystem-kdd949-project (npm)
- Aug 14, 2025
Malicious code in hill-dragon-vem951-project (npm)
- Aug 14, 2025
Malicious code in hill-boulder-izu499-project (npm)
- Aug 14, 2025
Malicious code in hilaris (npm)
- Aug 14, 2025
Malicious code in hijink (npm)
- Aug 14, 2025
Malicious code in hihihiha (npm)
- Aug 14, 2025
Malicious code in higirl (npm)
- Aug 14, 2025
Malicious code in highliht.js (npm)
- Aug 14, 2025
Malicious code in highkick (npm)
- Aug 14, 2025
Malicious code in highjump (npm)
- Aug 14, 2025
Malicious code in higgs-bellatrix-resolvers-typeorm (npm)
- Aug 14, 2025
Malicious code in hifijs (npm)
- Aug 14, 2025
Malicious code in hidbase (npm)
Page 5542 of 6,634