Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Sep 13, 2026
Malicious code in hissing_antlion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hissing-lavender-anglerfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hill-thistle-rdk333-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_squirrel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hissing-ivory-owl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hill-bound-write (npm)
1 compromised version
- Sep 13, 2026
Malicious code in himoysimi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hill-undertow-dhf073-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilton-ui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hill-quasar-ubz623-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hiot-api (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hippocms (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_rook_moccasin-9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilton_cms (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hipstest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hill-nugget-xok455-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_viper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hislaine-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hissing-purple-scorpion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_primate_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in himanshugarg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hirake (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_woodpecker_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hissing_anteater_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hisnameisloopy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hiplib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hiredo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in himanhutest57gggg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hioebieor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hill-boulder-izu499-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hiptime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hill-quartz-ysz022-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_tiger-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_raccoon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hissing-silver-gull (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hissing-peach-vulture (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hiot-messaging (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilaris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hipmunk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hissing_anaconda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hissing_bobcat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hill-dragon-vem951-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hiro-docs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hisnameisjc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_ox_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_gazelle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_grasshopper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_dolphin_beige-91 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_owl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_loon_z3n (npm)
1 compromised version
Page 574 of 7,329