Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,418 total · sorted newest first- Sep 13, 2026
Malicious code in holography-entanglement-ignite-chalk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_trout_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_locust-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holography-ganymede-proxima-hexo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_rodent-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_viper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_starfish_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holy_iguana_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_gibbon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holesaw (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_marten_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_nightingale_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_fly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_hippopotamus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-dewdrop-aic413-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-waterfall-bez687-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-49 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_meerkat_tan-52 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holhos (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_shark_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-falcon-gzs027-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_mosquito_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_dinosaur-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_leech_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_porcupine_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in holdingread-paypal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-umbra-xdi001-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-iceberg-uif020-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_catshark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-46 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_mammal_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-48 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_bass_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-50 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-elephant-rdz573-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_boar_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_spider_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_mammal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-moose-aeu448-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_eel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-ecosystem-rth157-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-lagoon-xew578-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow_penguin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hollow-utopia-sex755-project (npm)
1 compromised version
Page 566 of 7,329