Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in haven-a2bca-taw6k-nymph-project (npm)
- Aug 14, 2025
Malicious code in haven-9yae4-l6wbd-ember-project (npm)
- Aug 14, 2025
Malicious code in haven-5ynlj-z2reg-raven-project (npm)
- Aug 14, 2025
Malicious code in haven-387xx-89mga-coral-project (npm)
- Aug 14, 2025
Malicious code in haven-2i52m-qglgk-star-project (npm)
- Aug 14, 2025
Malicious code in haven-23lrq-dpwho-pearl-project (npm)
- Aug 14, 2025
Malicious code in haven-1v0nt-fi8so-xenon-project (npm)
- Aug 14, 2025
Malicious code in haven-1ec7t-dogih-orbit-project (npm)
- Aug 14, 2025
Malicious code in havegive (npm)
- Aug 14, 2025
Malicious code in haucict (npm)
- Aug 14, 2025
Malicious code in hathway (npm)
- Aug 14, 2025
Malicious code in hathormobile (npm)
- Aug 14, 2025
Malicious code in hathor-wallet-headless (npm)
- Aug 14, 2025
Malicious code in hathor-wallet (npm)
- Aug 14, 2025
Malicious code in hathor-healthcheck-lib (npm)
- Aug 14, 2025
Malicious code in hatebu (npm)
- Aug 14, 2025
Malicious code in hatcraft (npm)
- Aug 14, 2025
Malicious code in hasulam (npm)
- Aug 14, 2025
Malicious code in hashdump (npm)
- Aug 14, 2025
Malicious code in hash-spy-mock-web-sed (npm)
- Aug 14, 2025
Malicious code in hash-sha256 (npm)
- Aug 14, 2025
Malicious code in hash-query-string-assert-catch (npm)
- Aug 14, 2025
Malicious code in hash-cloud-short-void-cluster (npm)
- Aug 14, 2025
Malicious code in hash-bash-easy-xi-table (npm)
- Aug 14, 2025
Malicious code in hasaweb (npm)
- Aug 14, 2025
Malicious code in hasard-core (npm)
- Aug 14, 2025
Malicious code in harvesting-utils (npm)
- Aug 14, 2025
Malicious code in harvesting-twitter (npm)
- Aug 14, 2025
Malicious code in harvesting-mongodb (npm)
- Aug 14, 2025
Malicious code in hartree (npm)
- Aug 14, 2025
Malicious code in harpjs (npm)
- Aug 14, 2025
Malicious code in harpia (npm)
- Aug 14, 2025
Malicious code in harp-yi7i7-gj0g0-dew-project (npm)
- Aug 14, 2025
Malicious code in harp-xru52-rref5-verdant-project (npm)
- Aug 14, 2025
Malicious code in harp-cdng6-y0md2-dawn-project (npm)
- Aug 14, 2025
Malicious code in harp-8uplv-sqsxc-harmony-project (npm)
- Aug 14, 2025
Malicious code in harp-8dtdy-0fmvk-glow-project (npm)
- Aug 14, 2025
Malicious code in harp-86myn-b5m8t-dusk-project (npm)
- Aug 14, 2025
Malicious code in harmony_w1byd_ibuca_whisper (npm)
- Aug 14, 2025
Malicious code in harmony_n5gop_4pegj_cascade (npm)
- Aug 14, 2025
Malicious code in harmony_hwbu4_njhyw_jade (npm)
- Aug 14, 2025
Malicious code in harmony_d8lvx_ev6db_dream (npm)
- Aug 14, 2025
Malicious code in harmony_2kg4k_k65to_xenith (npm)
- Aug 14, 2025
Malicious code in harmony-v4atz-4fx7f-zenith-project (npm)
- Aug 14, 2025
Malicious code in harmony-uww9b-qqxzw-lunar-project (npm)
- Aug 14, 2025
Malicious code in harmony-runtime (npm)
- Aug 14, 2025
Malicious code in harmony-common (npm)
- Aug 14, 2025
Malicious code in harmony-1inh6-b1o7d-harp-project (npm)
- Aug 14, 2025
Malicious code in harmony-08d7w-43ckl-xanadu-project (npm)
- Aug 14, 2025
Malicious code in harmonic_v8o5m_ho0xa_dusk (npm)
Page 5546 of 6,634