Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in hang-tag-site (npm)
- Aug 14, 2025
Malicious code in handlebars-inline-precompile (npm)
- Aug 14, 2025
Malicious code in hanafi-takokak90-sukiwir (npm)
- Aug 14, 2025
Malicious code in hanafi-taiwan83-kuki (npm)
- Aug 14, 2025
Malicious code in hanafi-sasag7-sukiwir (npm)
- Aug 14, 2025
Malicious code in hanafi-nasi16-breki (npm)
- Aug 14, 2025
Malicious code in hanafi-martabak54-breki (npm)
- Aug 14, 2025
Malicious code in hanafi-keripik78-sukiwir (npm)
- Aug 14, 2025
Malicious code in hanafi-keripik30-breki (npm)
- Aug 14, 2025
Malicious code in hammock-wisp-fmh908-project (npm)
- Aug 14, 2025
Malicious code in hammock-vine-jhj888-project (npm)
- Aug 14, 2025
Malicious code in hammock-sunset-jye200-project (npm)
- Aug 14, 2025
Malicious code in hammock-opaline-zen621-project (npm)
- Aug 14, 2025
Malicious code in hammock-moose-wlx635-project (npm)
- Aug 14, 2025
Malicious code in hammock-lilac-izk224-project (npm)
- Aug 14, 2025
Malicious code in hammock-kaleidoscope-ijd211-project (npm)
- Aug 14, 2025
Malicious code in hammock-kaleidoscope-cno871-project (npm)
- Aug 14, 2025
Malicious code in hammock-glade-qbo685-project (npm)
- Aug 14, 2025
Malicious code in hammock-glade-irt151-project (npm)
- Aug 14, 2025
Malicious code in hammock-amber-wqq626-project (npm)
- Aug 14, 2025
Malicious code in halp-server (npm)
- Aug 14, 2025
Malicious code in halowhip (npm)
- Aug 14, 2025
Malicious code in halotech (npm)
- Aug 14, 2025
Malicious code in halomod (npm)
- Aug 14, 2025
Malicious code in haloaa (npm)
- Aug 14, 2025
Malicious code in halo2vis (npm)
- Aug 14, 2025
Malicious code in halo-shell (npm)
- Aug 14, 2025
Malicious code in halmos-cheatcodes (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in halmalloc (npm)
- Aug 14, 2025
Malicious code in halley-yakutsk-axios-scripts (npm)
- Aug 14, 2025
Malicious code in halley-stream-biohacking-zooarchaeology (npm)
- Aug 14, 2025
Malicious code in halley-sedimentology-orbit-gammarayburst (npm)
- Aug 14, 2025
Malicious code in halley-pyxis-lightyear-zenith (npm)
- Aug 14, 2025
Malicious code in halley-procyon-yonder-gulp (npm)
- Aug 14, 2025
Malicious code in halley-middleware-blazar-brane (npm)
- Aug 14, 2025
Malicious code in halley-jabbah-antimatter-metabolomics (npm)
- Aug 14, 2025
Malicious code in halley-express-deneb-draco (npm)
- Aug 14, 2025
Malicious code in halley-eclipse-mini-css-extract-plugin-nightwatch (npm)
- Aug 14, 2025
Malicious code in halley-concurrently-string-selenology (npm)
- Aug 14, 2025
Malicious code in halley-cli-nuxtjs-pegasus (npm)
- Aug 14, 2025
Malicious code in halk (npm)
- Aug 14, 2025
Malicious code in halfback (npm)
- Aug 14, 2025
Malicious code in haiwei (npm)
- Aug 14, 2025
Malicious code in haiscommondclient (npm)
- Aug 14, 2025
Malicious code in haiscommond (npm)
- Aug 14, 2025
Malicious code in haircolor (npm)
- Aug 14, 2025
Malicious code in haikuary (npm)
- Aug 14, 2025
Malicious code in haijiao (npm)
- Aug 14, 2025
Malicious code in haeui (npm)
- Aug 14, 2025
Malicious code in hadron-volcanology-subscription-auth (npm)
Page 5548 of 6,634