Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in honeycomb-jasmine-cjr567-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-vulture-zfl489-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-alpha-raspberry-pgmdr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-wisp-pws898-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-koala-hro888-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-glade-ckc132-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-octopus-ydn536-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-butterfly-yrp574-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-0m2-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-peacock-oys396-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-vulture-tbp716-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-swan-nek326-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-unicorn-kso579-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-lava-hxw725-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-9xd-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-penguin-czs624-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-sapphire-vgy006-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeydew-6pp-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-quasar-gwd409-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeybird (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-ripple-rmo970-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-topaz-hgl525-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-zenith-vzw435-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honeycomb-jasmine-uho811-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-infinity-ooh364-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_mockingbird_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest-coffee-minnow (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_sturgeon_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-acorn-pec137-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest-apricot-dog (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_thrush_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_frog_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest-scarlet-horse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_whale_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_toucan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_mite_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_viper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_bee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_chicken_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_snake_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_cricket_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_capybara_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_catshark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_ladybug_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_mosquito_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest-turquoise-elk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-jade-qcr844-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_swordfish-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_caterpillar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_silverfish_z3n (npm)
1 compromised version
Page 562 of 7,329