Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,392 total · sorted newest first- Sep 13, 2026
Malicious code in iasahu-sautg-infaru (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otatu-umita (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-ota-umitu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otabanumai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otan-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-ota-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otanmai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otanumai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otabauai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in i_json (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otanai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iafwjeqovtmnhcrk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-server-eclipse-aether (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-zenith-ganymede-css-minimizer-webpack-plugin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyptrails (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyrule-react-commons (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hypernova-simple-example (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-yakutsk-pino-apex (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-scorpius-xerxes-cli (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-spectron-webdriver-meteor-bulma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hypnosphi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hzrbqljeavcsnpkf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyvorlas-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in i-get-free-coin-master-spin-today-dkldzd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in i-knew-that (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyrmedia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hypertheme-matrix (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-terser-spica-element-ui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-terraforming-cli-callback (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-sedna-umbra-ursa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyuimsoue (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hypngqbzkmwjuiar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in i18-utils (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-wezen-gatsby-elara (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hytb3nqln1s0tp3d7ygf2wnl9djb5emc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperjoy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in i-just-love-bananas-dont-mind (npm)
1 compromised version
- Sep 13, 2026
Malicious code in i18next-ext (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-pino-pretty-levels-shelljs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-reveal-md-wasat-ganymede (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-janus-mutation-callback (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-morgan-start-update (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-norma-lyra-equinox (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-release-it-halley-radiant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-odin-element-ui-fornax (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-nebula-eleventy-betelgeuse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-link-request-meissa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-loglevel-quark-auth0 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-kastra-paleontology-magnetosphere (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-markdown-pdf-janus-server (npm)
1 compromised version
Page 539 of 7,328