Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in harmonic_bezft_36s9d_banyan (npm)
- Aug 14, 2025
Malicious code in harmonic_a1ca2_ql76a_ocean (npm)
- Aug 14, 2025
Malicious code in harmonic_9v7xh_78x6j_twilight (npm)
- Aug 14, 2025
Malicious code in harmonic_1ld6h_hkctz_pinnacle (npm)
- Aug 14, 2025
Malicious code in harmoney (npm)
- Aug 14, 2025
Malicious code in harmlesspackage (npm)
- Aug 14, 2025
Malicious code in harman (npm)
- Aug 14, 2025
Malicious code in hardytest (npm)
- Aug 14, 2025
Malicious code in hardy_har_har (npm)
- Aug 14, 2025
Malicious code in hardinfo (npm)
- Aug 14, 2025
Malicious code in hardhat-waffle (npm)
- Aug 14, 2025
Malicious code in hardhat-contract-deploy (npm)
- Aug 14, 2025
Malicious code in harbor-xenon-dne615-project (npm)
- Aug 14, 2025
Malicious code in harbor-uplift-vkr207-project (npm)
- Aug 14, 2025
Malicious code in harbor-tornado-gaq963-project (npm)
- Aug 14, 2025
Malicious code in harbor-river-xur763-project (npm)
- Aug 14, 2025
Malicious code in harbor-reef-inz755-project (npm)
- Aug 14, 2025
Malicious code in harbor-rainbow-s7vp (npm)
- Aug 14, 2025
Malicious code in harbor-prairie-kta125-project (npm)
- Aug 14, 2025
Malicious code in harbor-nugget-qyw196-project (npm)
- Aug 14, 2025
Malicious code in harbor-maple-jwaq (npm)
- Aug 14, 2025
Malicious code in harbor-lettuce-yl8i (npm)
- Aug 14, 2025
Malicious code in harbor-jewel-rxy620-project (npm)
- Aug 14, 2025
Malicious code in harbor-india-eqi7 (npm)
- Aug 14, 2025
Malicious code in harbor-grove-yvc860-project (npm)
- Aug 14, 2025
Malicious code in harbor-ferry-afx0 (npm)
- Aug 14, 2025
Malicious code in harbor-eggplant-gwqy (npm)
- Aug 14, 2025
Malicious code in harbor-chime-mpr471-project (npm)
- Aug 14, 2025
Malicious code in harbor-caravan-hvj800-project (npm)
- Aug 14, 2025
Malicious code in harbor-bonfire-qwl670-project (npm)
- Aug 14, 2025
Malicious code in harbor-bonfire-fqx182-project (npm)
- Aug 14, 2025
Malicious code in harbor-aspen-dmp363-project (npm)
- Aug 14, 2025
Malicious code in harbor-apple-6ip0 (npm)
- Aug 14, 2025
Malicious code in haraka-plugin-footer (npm)
- Aug 14, 2025
Malicious code in hapico (npm)
- Aug 14, 2025
Malicious code in hapi-slidev-mesosphere-standard (npm)
- Aug 14, 2025
Malicious code in hapi-services (npm)
- Aug 14, 2025
Malicious code in hapi-selenium (npm)
- Aug 14, 2025
Malicious code in hapi-pulsar-xanthus-avior (npm)
- Aug 14, 2025
Malicious code in hapi-proteomics-whitedwarf-nucleosynthesis (npm)
- Aug 14, 2025
Malicious code in hapi-node-avro-io (npm)
- Aug 14, 2025
Malicious code in hapi-logstash-tester (npm)
- Aug 14, 2025
Malicious code in hapi-kafka-node (npm)
- Aug 14, 2025
Malicious code in hapi-inquirer-kastra-event (npm)
- Aug 14, 2025
Malicious code in hapi-express-avior-ignite (npm)
- Aug 14, 2025
Malicious code in hapi-event-store (npm)
- Aug 14, 2025
Malicious code in hapi-doc-test (npm)
- Aug 14, 2025
Malicious code in hapi-data (npm)
- Aug 14, 2025
Malicious code in hanute (npm)
- Aug 14, 2025
Malicious code in hangars (npm)
Page 5547 of 6,634