Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in hostile-blush-donkey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hostile_iguana_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hostile-black-basilisk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hostile_porcupine_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in host-demo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hostile_primate_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hostile_kangaroo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hostile-bronze-snail (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hostile_pike_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_stingray_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_hawk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_halibut_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_tarsier_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_wildcat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_zebra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_salmon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_sloth_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horse_tomato-67 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horseradish-quinoa-cths (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_impala_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horseradish-elderberry-ll0r (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_cobra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horseradish-heliosphere-bjo7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horseradish-ginger-1r1f (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_swordfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horseradish-shack-oqi7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_parakeet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horseradish-supernova-9uzi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_partridge_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal-coral-silkworm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_crab_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_sawfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon_ydbzk_xdkpx_trill (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_bat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_mollusk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_pinniped_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_gull_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal-tomato-armadillo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_crawdad_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizonhopper (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_meadowlark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_marlin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_antelope_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible-sapphire-pelican (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizonharmonizer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_bobcat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_mouse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_pigeon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_hedgehog_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_tortoise_z3n (npm)
1 compromised version
Page 558 of 7,329