Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Sep 13, 2026
Malicious code in heroku-sudo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hexo-zenith-cypress-europa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heumon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hexo-apollo-janus-pm2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hexo-json-auth-vuepress (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hexo-changelog-sagitta-nconf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hexarobot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-wolf-module-halley (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hexo-boson-charon-framework (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hexo-interstellarmedium-spinner-less (npm)
1 compromised version
- Sep 13, 2026
Malicious code in herostereo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-websockets-arcturus-meteor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-quark-xanthus-umbra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-orbit-eslint-config-comet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-halley-semantic-release-rigel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-config-unuk-aurora (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-development-browserify-framework (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-epimetheus-meteor-commitlint (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-cross-env-quasar-duplex (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-dactyl-canopus-flare (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-publish-husky-ultra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-enceladus-commitizen-kaus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-webdriver-manager-atlas-unuk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-fornax-typeorm-shelljs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-polaris-regulus-apollo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-jekyll-io-nightwatch (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-testcafe-toml-nextjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-superagent-google-koa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-version-mdx-yaml (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-child-process-event-firebase (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-spica-taurus-json (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-configstore-eslint-plugin-express (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-webdriver-manager-janus-hyperion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-concurrently-hermes-subscription (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-ceres-bellatrix-astro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-publish-socketio-commitizen (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-css-minimizer-webpack-plugin-local-request (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-child-process-apex-centauri (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-venus-cosmos-rest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-paleontology-taurus-wavefunction (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-sagitta-galaxy-testcafe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-css-loader-request-restart (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-gacrux-meissa-cordelia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-celeste-react-bootstrap-nodejs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-rehype-writable-eleventy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-apollo-gacrux-eleventy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-development-virgo-promise (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-chromedriver-registry-websockets (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-radiant-lint-staged-sirius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-stop-uglify-js-axios (npm)
1 compromised version
Page 578 of 7,329