Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in homely_harrier_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_pelican_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_wolverine_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_magpie_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homey-web-app (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_spider_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homomaid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_unicorn_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_wasp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_platypus_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon-fuchsia-puffin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hon-olive-skunk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homework-module-14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_mosquito_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_quail_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely-gray-mule (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_landfowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_tapir_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homals (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homebridge-433mhz-light (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_hyena_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_bovid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homebridge-dyson (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely-coffee-marmoset (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homebridge-platform-smartac-f659675 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely-harlequin-blackbird (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_kingfisher_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely-turquoise-canidae (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_swift_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_sheep_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_kite_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless-ivory-leopon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_coral_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_cricket_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_felidae_salmon-100 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely-gray-quelea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_planarian_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_bobolink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_marten_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_deer_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_jay_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_guanaco_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_crab_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_octopus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_spoonbill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_falcon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_damselfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_puma_yellow-66 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in home-device-inventory (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homely_booby_salmon-91 (npm)
1 compromised version
Page 564 of 7,329