Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in horadric.js (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon_1pxfg_lxkto_limestone (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hoots-lib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-mebjh-bw69m-song-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-yankee-bravo-wjosv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-ui-ng (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hoppscotch-sh-admin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon_3m5i5_d5cgm_hush (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hoodle-plugins-manager (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-xigua-ieqf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hoomba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hongwan-juexing-v3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-fr53a-wyawp-frost-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hookie.js (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hoonshow (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hopital (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-fern-syz975-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hope-widget-xyz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hoo-watch-black-adam-full-movies-online-streamings-at-homes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honrphys (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-yankee-mthv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-xylophone-fsj386-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-xqz-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-fern-bro318-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-octopus-rhk645-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-xray-papa-xntxv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-nebula-xhj744-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-he4a0-y31v1-karma-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in horizon-sp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-juliet-delta-umiqg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-car-qi7n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-raspberry-lcxj (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-mango-57pl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-november-rnbx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-xigua-gqho (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-elderberry-vanilla-wjwxg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-pqv-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-f57-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-iceberg-gelu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-orange-juliet-yroxo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-lemon-olij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-papaya-kjuh (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-oe7-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-victor-cherry-lalwt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-romeo-nzgg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-ugli-5jbd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-vvb-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-victor-november-ibkty (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-orange-isyn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-va5-project (npm)
1 compromised version
Page 560 of 7,329