Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in honeydew-orange-vnin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-xigua-aynr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-mike-zulu-ncvvt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-kkf-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-mike-ltcl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-bravo-4aez (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-ekg-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-strawberry-uniform-wgptz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-ugli-zulu-bzgbp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-date-tango-eyggp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-vanilla-c6ge (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-nzj-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-rjx-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-bravo-ptah (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-banana-dlbc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-tangerine-whiskey-ormij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-watermelon-golf-zungw (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-golf-gkqb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-kilo-kiwi-qhdhe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-bravo-papa-zttfg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-date-srmf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-echo-raspberry-liuag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-nutmeg-wc4w (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-quebec-xdpl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-l9d-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-grape-lrdy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-n6l-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-strawberry-elderberry-hvlik (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-echo-ausc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-date-mango-asrqr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-uniform-india-molfp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-banana-xxoz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-dby-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-rj9-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-tangerine-xray-heqld (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-vanilla-xigua-injij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-a8v-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-kaleidoscope-jmn345-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-nymph-yce559-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeybase (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-xerox-scg393-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-411-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-opaline-mcv575-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-yacht-ksy900-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-glacier-hye029-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-volcano-hki072-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-tulip-zie836-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey_ty0o2_jv1xm_infinity (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-tundra-tah530-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-27r-project (npm)
1 compromised version
Page 561 of 7,329