Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Sep 13, 2026
Malicious code in heres-matinula-uinaya (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matila-unuda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-umanbanadia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matiula-unuda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-uinayami (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heres-matinula-umanadia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-tanbu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tam (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tanbuyknta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tama (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tanbta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-tanbuykunt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tanbuyta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tauw (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tauwara (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-tanb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tauwaran (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tauwaranaj (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tauwar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-ta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tauwarana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-tan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tauwa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-ta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-tanbuykunta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tanbuykunta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-tanbuykun (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-ta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tauwaranaja (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-tanbuy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manuic-tamai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-manic-tanta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-tanbuyk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereis-maniac-tanbuyku (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hereaccount-nodejs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-pyxis-rehype-hermes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in here-watch-creed-3-2023-online-on-fullmovies-free-at-home (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-radiant-jekyll-delphinus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin (npm)
1 compromised version
- GHSA-wfq2-xjmh-mqq7Malwarenpmhere-full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homeSep 13, 2026
Malicious code in here-full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-home (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-configstore-telesto-vulcan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-grus-css-loader-package (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-server-airbnb-css-loader (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-centaurus-oberon-sync (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-ceres-jest-callback (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-electron-builder-testcafe-iota (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-private-mocha-vuetify (npm)
1 compromised version
- Sep 13, 2026
Malicious code in here-watch-cocaine-bear-2023-online-on-fullmovies-free-at-home (npm)
1 compromised version
Page 580 of 7,329