Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Sep 13, 2026
Malicious code in hilarious-magenta-squirrel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious_armadillo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious-pink-angelfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hilarious-teal-meerkat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in high_whale_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in high_smelt_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in highchartexport (npm)
1 compromised version
- Sep 13, 2026
Malicious code in higgs-ichnology-paleoceanography-pm2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hijink (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_eagle-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_hamster_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_mosquito_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hibt-internal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hfjh5sm3jihqkc1toapmcrfkma08ki46 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hideorg-lvl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_swift_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidbase (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_lemming_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in higgs-biosignature-inflation-upgrade (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_python_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hexpacker (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hieuil (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hibt-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_stingray_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_aardwolf_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_rodent_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hgfiuythdjfhgff (npm)
1 compromised version
- Sep 13, 2026
Malicious code in higgs-commitizen-aether-archaeogenetics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hichambaguette (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_locust_jade-78 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hibt-main (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_reindeer_lime-52 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_yak_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hicks-wallet-store (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hfexcjvbsimukypz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hextest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hhjslib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_tuna_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hidden_raccoon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hey-message-content (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hicks-soluble-pot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hifijs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heyheyhey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hg-icons-2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hifromhere1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hhotel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hexojs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heyhamont (npm)
1 compromised version
- Sep 13, 2026
Malicious code in higgs-bellatrix-resolvers-typeorm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hgkzrc-devapptea (npm)
1 compromised version
Page 576 of 7,329