Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,408 total · sorted newest first- Sep 13, 2026
Malicious code in hushed_minnow_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_partridge_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_flyingfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_ferret-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_aphid-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_monkey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_lemming_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hush_ix0lp_ohi9t_utopia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_cuckoo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_marmot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in husband-welcome-past (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_junglefowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_bandicoot-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_bedbug_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_panther_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_quokka_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_chipmunk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed-gold-tarantula (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed-white-scorpion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_cougar-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hush_fq7xq_ixdms_xenolith (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed_ocelot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed-yellow-pike (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hushed-coffee-bobolink (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt-aquamarine-cephalopod (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_scallop-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_takin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt-teal-boar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_marmot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in huqas_web (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_unicorn_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurge (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_roundworm_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_wallaby-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in huoxi-mofa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in huobi-bs-fe-common (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_guan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_kangaroo-strongdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_galliform_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_swan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_possum_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hunters (npm)
1 compromised version
- Sep 13, 2026
Malicious code in huobi-trading-view-hbcloud (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_koala_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_catfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_mink-excellentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt_marten_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hurt-lavender-stoat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hunimi-satu-angifaafiug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hunimia-satihub-naib (npm)
1 compromised version
Page 545 of 7,329