Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in hearth-xmwq7-1tcpj-aurora-project (npm)
- Aug 14, 2025
Malicious code in hearth-lvynh-a7r5l-paradise-project (npm)
- Aug 14, 2025
Malicious code in hearth-95bye-rdp1t-rose-project (npm)
- Aug 14, 2025
Malicious code in hearforme (npm)
- Aug 14, 2025
Malicious code in healge (npm)
- Aug 14, 2025
Malicious code in heading (npm)
- Aug 14, 2025
Malicious code in headache (npm)
- Aug 14, 2025
Malicious code in hdworld (npm)
- Aug 14, 2025
Malicious code in hdkye (npm)
- Aug 14, 2025
Malicious code in hdfkit (npm)
- Aug 14, 2025
Malicious code in hdeky (npm)
- Aug 14, 2025
Malicious code in hdebug (npm)
- Aug 14, 2025
Malicious code in hcrckiosk (npm)
- Aug 14, 2025
Malicious code in hcompare (npm)
- Aug 14, 2025
Malicious code in hcdemos (npm)
- Aug 14, 2025
Malicious code in hbtrack (npm)
- Aug 14, 2025
Malicious code in hbqxpro (npm)
- Aug 14, 2025
Malicious code in hbmediaelement (npm)
- Aug 14, 2025
Malicious code in hazel-windmill-tyeg (npm)
- Aug 14, 2025
Malicious code in hazel-whiskey-l2ig (npm)
- Aug 14, 2025
Malicious code in hazel-vinegar-mx3y (npm)
- Aug 14, 2025
Malicious code in hazel-redshift-60dx (npm)
- Aug 14, 2025
Malicious code in hazel-pier-9a36 (npm)
- Aug 14, 2025
Malicious code in hazel-lunar-nemb (npm)
- Aug 14, 2025
Malicious code in hazel-carrot-08sq (npm)
- Aug 14, 2025
Malicious code in hazecod (npm)
- Aug 14, 2025
Malicious code in haywyre (npm)
- Aug 14, 2025
Malicious code in hayalevi (npm)
- Aug 14, 2025
Malicious code in haxewumbo (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-promise-exec-greatfilter (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-prettier-quantumfoam-xenon (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-jupiter-pulsar-spica (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-deneb-xanthus-higgs (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-auriga-triton-extremophile (npm)
- Aug 14, 2025
Malicious code in hawk-td-mocks (npm)
- Aug 14, 2025
Malicious code in hawk-lib (npm)
- Aug 14, 2025
Malicious code in havilland (npm)
- Aug 14, 2025
Malicious code in haven-z90ym-6l2pr-ember-project (npm)
- Aug 14, 2025
Malicious code in haven-y9kxr-qkcm0-grove-project (npm)
- Aug 14, 2025
Malicious code in haven-x5nz7-1h12l-obsidian-project (npm)
- Aug 14, 2025
Malicious code in haven-x3evf-636lr-iris-project (npm)
- Aug 14, 2025
Malicious code in haven-wyjzj-i1oih-frost-project (npm)
- Aug 14, 2025
Malicious code in haven-w6yjy-3d9rf-terra-project (npm)
- Aug 14, 2025
Malicious code in haven-sdk4c-zhbb0-fjord-project (npm)
- Aug 14, 2025
Malicious code in haven-qoxpr-q6vgc-zenith-project (npm)
- Aug 14, 2025
Malicious code in haven-ilsmr-kgh8y-ice-project (npm)
- Aug 14, 2025
Malicious code in haven-hj2xz-07tw6-jewel-project (npm)
- Aug 14, 2025
Malicious code in haven-dutwo-9afnl-lavender-project (npm)
- Aug 14, 2025
Malicious code in haven-bes9v-66v54-fern-project (npm)
- Aug 14, 2025
Malicious code in haven-bd1rs-tber9-solace-project (npm)
Page 5545 of 6,634