Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in horizontal_aardvark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizonadventurer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible-coral-leopard (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible-tomato-cicada (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_gorilla_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizoncrafter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_whale-notthedev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_boa_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_xerinae_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible-moccasin-cod (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible-chocolate-lynx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_halibut_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_chinchilla_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible-jade-mammal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal-ivory-snail (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_raven_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon_tsmnl_vbm7p_unicorn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_albatross_amethyst-44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_bobolink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_giraffe_gold-61 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_elephant_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_panda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_smelt_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizondreamer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_rooster_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal-copper-donkey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizonhero (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_cardinal-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horrible_chickadee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_mandrill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon_oiwy1_2qofz_dream (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_angelfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizontal_bat_bronze-18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hook-listen-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-7q1v0-dpx1u-nebula-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon_0cirm_dz4mp_giraffe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-df4f1-ig352-juniper-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-yankee-ubpq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hongse-huanghou (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon_e4emh_cpwvt_ultraviolet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon_ev4uw_9dmsw_snow (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-gorilla-zst235-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hoptimist (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-utgdy-61qus-mystic-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon_arlxn_4xc4j_quasar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-jc8hn-tnmjo-comet-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-vdqrx-5z7dm-ember-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-dragon-khi299-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hooka-tools (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hoodstats (npm)
1 compromised version
Page 559 of 7,329