Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,423 total · sorted newest first- Sep 13, 2026
Malicious code in hokage-28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-36 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hockeygm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hltstudy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-35 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-25 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hokage-12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hjnxmk-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hlscore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadwadsafeafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaeeaefedeefredafafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hl7.fhir.us.davinci-hrex (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hkhkhk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hkaga-ama (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadwadeafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hiwaydb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaedeaefededefredafafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitground (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaeeaefeerafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hjvgvgggx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hkjdfhdsfhjkhsdfkhg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hkaga-ana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hl7.fhir.r4.core (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hivemed-logic (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hkdoekpmlfcjygtx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hkbudget (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hkpmfygezqtjdras (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadaeade (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaedaeaefedeadedefredasfgeaffaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadaeaade (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaedeaefdeadedefredafafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hiwoeusd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadwadaeafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadwadafeafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hktoolkit (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hl7.fhir.us.core (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaeeaefederdafafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaeeaefeerdaafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaedaeaefedeadedefredasfeaffaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitler (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hkit (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaedaeaefedeadedefredafeafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswaeae (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hjgsawkkrqdivxeo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hjttdu-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaedeaefedeadedefredafafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhr-aad (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hkjfhgdk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaeeaefedefredafafaadde (npm)
1 compromised version
Page 568 of 7,329