Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,423 total · sorted newest first- Sep 13, 2026
Malicious code in hjrivaeclknbouyf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadeae (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaedaeaefedeadedefredasfeafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hljwhb-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdwadsafeafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswasdweaddeassaeeaefededefredafafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeasdeadeddaaf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadadeafaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeasdeadeddfaaef (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeasdeadeddfaaefea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke90 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke86 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaesdeadeadee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke99 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeasdeef (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke98 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeasdee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaesdeadee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadaeaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeasdeadeddaf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeasdeadef (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaesddee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke89 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke85 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irher-aeswadaeaaadde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke87 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke95 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aade (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeddee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeadee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke93 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaedde (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaesdedeadee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke92 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaesddeadee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeasdeadedf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke96 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke88 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke97 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke94 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke91 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitale-irhar-aaeasdeadeasdeadeddf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke73 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke63 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke72 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke50 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke82 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke8 (npm)
1 compromised version
Page 569 of 7,329