Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in helmelar (npm)
- Aug 14, 2025
Malicious code in hellstorm (npm)
- Aug 14, 2025
Malicious code in hellonew (npm)
- Aug 14, 2025
Malicious code in helloModule (npm)
- Aug 14, 2025
Malicious code in hellomav (npm)
- Aug 14, 2025
Malicious code in hello_ltb (npm)
- Aug 14, 2025
Malicious code in hello-world-target (npm)
- Aug 14, 2025
Malicious code in hello-world-lupin (npm)
- Aug 14, 2025
Malicious code in hello-world-from-lupin-99 (npm)
- Aug 14, 2025
Malicious code in hello-world-from-lupin-95 (npm)
- Aug 14, 2025
Malicious code in hello-cloud (npm)
- Aug 14, 2025
Malicious code in hellcity (npm)
- Aug 14, 2025
Malicious code in heliosphere-wormhole-mqqr (npm)
- Aug 14, 2025
Malicious code in helios-ultra-rollup-plugin-gridsome (npm)
- Aug 14, 2025
Malicious code in helios-joviology-changelog-less-loader (npm)
- Aug 14, 2025
Malicious code in helios-coronalmassejection-carina-crust (npm)
- Aug 14, 2025
Malicious code in heliophysics-gulp-interstellarmedium-asteroid (npm)
- Aug 14, 2025
Malicious code in helicopter-xigua-m89x (npm)
- Aug 14, 2025
Malicious code in helicopter-nectarine-18ix (npm)
- Aug 14, 2025
Malicious code in helicopter-hotel-x38o (npm)
- Aug 14, 2025
Malicious code in helicopter-airplane-4eq8 (npm)
- Aug 14, 2025
Malicious code in heka-react-bootstrap-electron-builder-puppeteer (npm)
- Aug 14, 2025
Malicious code in heka-native-frontend-lint-staged (npm)
- Aug 14, 2025
Malicious code in heka-luminescence-parsec-janus (npm)
- Aug 14, 2025
Malicious code in heka-fornax-antares-phenomic (npm)
- Aug 14, 2025
Malicious code in heiban (npm)
- Aug 14, 2025
Malicious code in hedgehog-yucca-wxs277-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-xerus-cpl405-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-willow-klf228-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-whale-pdg410-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-vortex-hiz322-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-registry (npm)
- Aug 14, 2025
Malicious code in hedgehog-quasar-ppf530-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-orchid-phg379-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-aroma-swh506-project (npm)
- Aug 14, 2025
Malicious code in hebiteiki (npm)
- Aug 14, 2025
Malicious code in heather_vhnao_2gvsk_paradise (npm)
- Aug 14, 2025
Malicious code in heather_bq7g3_nf4xz_raven (npm)
- Aug 14, 2025
Malicious code in heather_9km8u_9mvz3_jigsaw (npm)
- Aug 14, 2025
Malicious code in heather_8n2kz_dg94m_cascade (npm)
- Aug 14, 2025
Malicious code in heather_8j6tf_vvmrc_iris (npm)
- Aug 14, 2025
Malicious code in heather_6ngoh_px1dt_aspen (npm)
- Aug 14, 2025
Malicious code in hease-js-api (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion972 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion574 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion397 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion306 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion131 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion-free- (npm)
- Aug 14, 2025
Malicious code in hearthwiz (npm)
Page 5544 of 6,634