Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,408 total · sorted newest first- Sep 13, 2026
Malicious code in hw-banner (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-api-secret (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-customer-stats (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-popup (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-timeout-layer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-me (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_shark-tool (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_reindeer_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-intent-media (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-survey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-interstitial (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_roadrunner_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-branding (npm)
1 compromised version
- Sep 13, 2026
Malicious code in huskyos (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_tarantula_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-intl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-performance-tracking (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_turkey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-tealium (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-angular-validator (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-exception (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-theme (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_raccoon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hustlejs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hw-theme-rebrand (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_rhinoceros-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_kingfisher_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_caterpillar-excellentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-registry-biomimicry-indus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-remark-sedna-hercules (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_angelfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_marmoset_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_koi_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-xml-dagda-redis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_chickadee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_limpet_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_boar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-upgrade-soap-jekyll (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_jaguar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-stratigraphy-gravity-orogeny (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-wezen-lyra-deneb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_buzzard_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-xml-kastra-await (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_chinchilla_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-zenith-less-yonder (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_bobcat-tool (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_emu_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_ant_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_limpet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-rose-gamefowl (npm)
1 compromised version
Page 543 of 7,329