Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,487 total · sorted newest first- Sep 13, 2026
Malicious code in helios-impulse-meteor-fomalhaut (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-nightwatch-pavo-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-quasar-karma-webdriver-mocha (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-joviology-changelog-less-loader (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-vuetify-deneb-nebula (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-jekyll-polaris-soap (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-quito-chai-commitizen (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-xml-restart-dorado (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-cressida-biogeochemistry-halley (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heliophysics-comet-rollup-plugin-commitlint-config-angular (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-webpack-init-prompts (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-achernar-postcss-loader-cypress (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heliophysics-cosmochemistry-xenobiology-gravitationalwave (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-concurrently-cordelia-proxima (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-algol-norma-pipe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-acamar-cypress-phoenix (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-scorpius-module-registry (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-run-script-norma-mongodb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-zenobia-pyxis-mui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-react-bootstrap-electron-builder-puppeteer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-centaurus-juno-lint-staged (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-relay-grunt-gammarayburst (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-quito-pipe-eslint-config (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-vulcan-spectron-express (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heliophysics-blackhole-ganymede-cluster (npm)
1 compromised version
- GHSA-cp7x-jjwm-p8xrMalwarenpmheliophysics-sedimentology-paleoclimatology-css-minimizer-webpack-pluginSep 13, 2026
Malicious code in heliophysics-sedimentology-paleoclimatology-css-minimizer-webpack-plugin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-arcturus-rocket-jovian (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helios-components (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-rehype-duplex-ursa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heliophysics-pino-umbriel-request (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-puppeteer-phoebe-meteor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helenacarvalho (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helicopter-airplane-4eq8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-private-electron-builder-gridsome (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helicopter-hotel-x38o (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heliophysics-gulp-interstellarmedium-asteroid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heliophysics-aurora-lint-staged-global (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helicopter-nectarine-18ix (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-tool-fornax-schema (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helio_tawa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-umbra-typeorm-parcel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helicopter-xigua-m89x (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-fornax-antares-phenomic (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heix-erlinglingwu-part2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-neptune-nightwatch-andromeda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-ophiuchus-cache-europa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heix-erlingyiyi-part4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-luminescence-parsec-janus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heix-erlinglingqi-part3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heka-bootstrap-javascript-loopback (npm)
1 compromised version
Page 599 of 7,330