Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in homeless_guppy_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_ptarmigan_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in homeless_rhinoceros_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy-aqua-antelope (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hologram-taurus-lightyear-auth0 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_crane_magenta-79 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-charon-axios-development (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-karma-plutology-cryonics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_anaconda_harlequin-26 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_toucan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hologram-ini-elara-dysonswarm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollywood-hdtv-shield-server (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy-green-stork (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy-harlequin-angelfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_beaver_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_dingo_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-antares-enif-callback (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_butterfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_aphid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_gull_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_krill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hologram-oscillation-config-nestjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-development-nightmare-uranology (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_caterpillar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_canid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy-orange-lynx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_sturgeon_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-commitizen-kardashevscale-morgan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-australis-pavo-magnetar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_baboon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hologramm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_guppy_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_crayfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy-amber-parrot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-ursa-restart-jupiter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hologram-meteor-scorpius-jabbah (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy-jade-silverfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hologram-cors-quito-string (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hologram-jekyll-radiometric-bellatrix (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_bat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-hercules-janus-postcss (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hologram-oscillation-rehype-await (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_leopon_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_parrotfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-heka-mesosphere-biomimicry (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-commitlint-xml-unuk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_piranha_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_cricket_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy-yellow-tahr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_sawfish_z3n (npm)
1 compromised version
Page 565 of 7,329