Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Sep 13, 2026
Malicious code in hercules-bellatrix-electron-quantum (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heoubonuobonuode-xingfu-qiji (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-ubi78-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tongseng11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-wajit63-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tumis42-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tongseng47-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-wajit59-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tumis99-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tongseng62-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-ubi51-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-betelgeuse-sedna-izar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tumis70-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-andromeda-cors-aether (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendrix-teadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-async-sync-less-loader (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tumis47-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tomat84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-ubi62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hercules-betelgeuse-build-release-it (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tomat40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-ubi43-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heqetlabs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tomat96-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tumis87-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-ubi94-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-wajit94-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendrasatria (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-toge39-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tapai90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-toge22-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tek36-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tapai32-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tek29-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tek6-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tempe45-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tek37-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tek70-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tiwul65-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tempe7-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tempe93-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tapai46-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-teh79-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-telur47-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-toge41-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tempe78-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tek46-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-teh83-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-telurtahu52-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-tomat3-miaww (npm)
1 compromised version
Page 582 of 7,329