Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,423 total · sorted newest first- Sep 13, 2026
Malicious code in hitachi-poke84 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke53 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke62 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke67 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke81 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke78 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke75 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke66 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke57 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke79 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke69 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke68 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke80 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke77 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke65 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke74 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke71 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke61 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke64 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke70 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke58 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke51 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke52 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke76 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke56 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke54 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke83 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke55 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke60 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke59 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke36 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke41 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke38 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke48 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke27 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke34 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke121 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hitachi-poke23 (npm)
1 compromised version
Page 570 of 7,329