Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,392 total · sorted newest first- Sep 13, 2026
Malicious code in hyperion-prettier-stylelint-sqlite-rehype (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-markdown-pdf-supervisor-selenium (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-materialize-nodemon-fork (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-repository-canopus-aldebaran (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-oberon-mongodb-quantum-computing (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-mocha-start-hermes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-markdown-process-nextjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-nightmare-markdown-pdf-gravity (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-jsonp-rimraf-hapi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-postgres-eslint-config-warp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-koa-vuepress-zenith (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-sails-accretion-multiverse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-grus-aether-exec (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-hermes-xerxes-yakutsk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-hermes-jsonp-ceres (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-graviton-filament-ionosphere (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-hermes-oauth-non-blocking (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-express-levels-global (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-janus-install-markdown-pdf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-element-ui-google-link (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-ganymede-perseus-middleware (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-hermes-version-orbit (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-eslint-config-oberon-babel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-inquirer-galaxy-quantumfoam (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-elara-weywot-react-bootstrap (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-epimetheus-pavo-toml (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-heka-promise-taurus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-form (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-iota-hyperion-grus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-cosmos-avior-leda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hydrogen-ui-alpha (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hydrogeology-transform-crust-library (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-concurrently-photon-metabolomics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-auriga-mensa-process (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-baryon-fork-graphql (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hypc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hydrogeology-darkmatter-achernar-inquirer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hydrogeology-mesosphere-event-troposphere (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyeonhau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-blaze-acamar-equinox (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hydrogeology-primatology-galaxy-astrophysics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hydrogeology-event-wezen-eris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-build-style-loader-lynx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hydrogeology-hydra-phoenix-fornax (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-despina-process-loopback (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-aldebaran-node-config-cross-env (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hydrogeology-public-hapi-bootes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hyperion-bellatrix-carina-carpo (npm)
1 compromised version
Page 540 of 7,328