Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Sep 13, 2026
Malicious code in hermes-relay-mensa-rollup-plugin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-request-antares-less-loader (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matila-unpamfid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-umanuibanadia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matiula-umanuiadia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tauwaaaja (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-matnla-unta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-aether-castor-europa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-umadia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matiula-umanuibanadia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-castor-pm2-celeste (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matila-und (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tauwaanaja (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tamaliv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matiula-umanuibnadia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tamualiv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-callback-equinox-magellan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-browserify-alphard-greatfilter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinla-unit (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-taua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matiula-umanuiada (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-how-to-watch-scream-6-online-free-fullmovies-123mioves (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matila-unpmfid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-chakra-ui-phenomic-mdx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matiula-umanuinadia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinla-uni (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinla-uinani (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tauwaja (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-acamar-pino-pretty-nodemon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tamaiv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matila-unfid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matnla-unta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-uinayam (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinla-uinayni (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-antd-local-scorpius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matila-unud (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tauwaranaja (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-uinayamani (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-backend-aether-aurora (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinla-unita (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinla-uinni (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinla-uinayamni (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tauja (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matiula-unuiada (npm)
1 compromised version
- Sep 13, 2026
Malicious code in herkcoin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-uinaa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-uia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in herman-teadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-umannadia (npm)
1 compromised version
Page 579 of 7,329