Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in honest-plum-coral (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-mist-ary569-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest-lime-newt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_shrimp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_bear_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-iris-zki944-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_bobolink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_mite_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest-peach-ant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest-salmon-tiger (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_squid_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_loon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_mink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honey-cliff-tnd256-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_mongoose_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_lizard_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_cuckoo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_silkworm-teagooddev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_parakeet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_salamander_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_reindeer_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_newt_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_dog_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_salamander_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_seahorse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_canid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_beetle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_tern_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_goose-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest_starfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in honest-amber-cheetah (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_smelt-biggestdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homepod (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_monkey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon-amethyst-silverfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homey-device-discovery (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_sloth_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_yak_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_weasel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homoglyphs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_penguin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_marmot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_zebra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon_badger_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_python_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_tyrannosaurus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_swallow_replicate_automation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon-aquamarine-louse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon-green-platypus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homematic-js-km200 (npm)
1 compromised version
Page 563 of 7,329