Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,408 total · sorted newest first- Sep 13, 2026
Malicious code in husky_anaconda_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_kangaroo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-xenos-lint-staged-dotenv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky_haddock_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-readable-eleventy-babel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-semantic-release-zenith-iota (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-indigo-dragonfly (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-helios-wezen-nextjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-gold-bear (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-quito-electron-frontend (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-logger (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-polaris-fusion-development (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-meteor-gemini-sirius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-ophiuchus-despina-nebula (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-ivory-flyingfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-less-ultra-despina (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-loop-writable-html-webpack-plugin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-library-janus-supervisor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-pyxis-browserify-ganymede (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husheor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_tiglon_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-black-penguin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-cli-axios-private (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-child-process-lint-staged-dynamo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-global-lint-staged-callback (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-despina-readable-oscillation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-apricot-walrus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-ganymede-pm2-react-bootstrap (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-glaciology-weywot-rest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-fork-child-process-flare (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_skunk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-figures-bellatrix-chai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-backend-jovian-ophiuchus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_wildebeest_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-cross-env-miranda-eclipse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-build-toml-troposphere (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_skink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_smelt_red-2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-element-ui-rest-eris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-copper-dingo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-eridanus-quasar-geckodriver (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-amber-cod (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushlockler (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-callback-algol-sirius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husky-bulma-nebula-concurrently (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hush_hptfz_u1ddr_valley (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_scorpion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hush_h75h0_ghoj3_elephant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_bug_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_crayfish_z3n (npm)
1 compromised version
Page 544 of 7,329