Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in how-to-get-free-spins-in-coin-master-2023-dkfkf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in housefind (npm)
1 compromised version
- Sep 13, 2026
Malicious code in how-to-watch-john-wick-cha-pter-4-fullmovies-at-homes-on-123-movies (npm)
1 compromised version
- Sep 13, 2026
Malicious code in how-to-watch-scream-6-movie-online-for-free-at-home (npm)
1 compromised version
- Sep 13, 2026
Malicious code in how-i-get-fortnite-vbucks-codes-for-free-jzldlz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in how-to-get-v-bucks-for-free-zdkkef (npm)
1 compromised version
- Sep 13, 2026
Malicious code in howell-wallet-store (npm)
1 compromised version
- Sep 13, 2026
Malicious code in how-i-get-robux-codes-march-2023-dkzzdarg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hpioj5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hoverpuck (npm)
1 compromised version
- Sep 13, 2026
Malicious code in how-to-get-free-fortnite-vbucks-2023-zdkdz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in how-to-npm-tester-lee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in how-to-get-free-coin-master-spins-april-2023-djzdk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in how-to-win-free-fortnite-v-bucks-zfzefzf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hpfeedirc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-elderberry-romeo-saxfp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in house-click (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-u7v-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-xray-pjod (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-elderberry-hhou (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-xenon-m0k3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-mango-ypoo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-mike-zucchini-tbpst (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-kiwi-22a8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-india-ihhi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-kilo-jrme (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-k2x-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-o0e-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-golf-lmol (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-raspberry-uogt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-juliet-udfh (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-pr7-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-romeo-ifxx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-ugli-oscar-ylhqa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-xgw-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-juliet-yyno (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-lima-tango-xcygz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-november-orange-teqks (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotline-frontend (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-strawberry-lemon-cfqzi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-helicopter-rzk6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-l19-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-lima-charlie-gwkmz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-o8p-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-f63-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-sierra-charlie-agdeg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-oscar-fig-hmfhw (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-xigua-nfoh (npm)
1 compromised version
- Sep 13, 2026
Malicious code in houdini_test_pack_1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hotel-fig-ewgs (npm)
1 compromised version
Page 555 of 7,329