Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,213 total · sorted newest first- Aug 14, 2025
Malicious code in hydrogen-ui-alpha (npm)
- Aug 14, 2025
Malicious code in hydrogen-react (npm)
- Aug 14, 2025
Malicious code in hydra-rollup-kuiperbelt-node-sass (npm)
- Aug 14, 2025
Malicious code in hydra-orogeny-nanotechnology-zenobia (npm)
- Aug 14, 2025
Malicious code in hydra-chalk-io-exec (npm)
- Aug 14, 2025
Malicious code in hydra-abiogenesis-auriga-decoherence (npm)
- Aug 14, 2025
Malicious code in hyctymbw (npm)
- Aug 14, 2025
Malicious code in hybliz (npm)
- Aug 14, 2025
Malicious code in hx9ehzesmiby2b0bcicrnno9m9l4agzz (npm)
- Aug 14, 2025
Malicious code in hwtbar (npm)
- Aug 14, 2025
Malicious code in hwriter (npm)
- Aug 14, 2025
Malicious code in hwonutkbfeigalqk (npm)
- Aug 14, 2025
Malicious code in hwdong (npm)
- Aug 14, 2025
Malicious code in hwatch (npm)
- Aug 14, 2025
Malicious code in hw-trnasport-u2f (npm)
- Aug 14, 2025
Malicious code in hw-tracking (npm)
- Aug 14, 2025
Malicious code in hw-timeout-layer (npm)
- Aug 14, 2025
Malicious code in hw-theme-rebrand (npm)
- Aug 14, 2025
Malicious code in hw-theme (npm)
- Aug 14, 2025
Malicious code in hw-tealium (npm)
- Aug 14, 2025
Malicious code in hw-survey (npm)
- Aug 14, 2025
Malicious code in hw-performance-tracking (npm)
- Aug 14, 2025
Malicious code in hw-olab (npm)
- Aug 14, 2025
Malicious code in hw-me (npm)
- Aug 14, 2025
Malicious code in hw-marketing (npm)
- Aug 14, 2025
Malicious code in hw-intl (npm)
- Aug 14, 2025
Malicious code in hw-interstitial (npm)
- Aug 14, 2025
Malicious code in hw-intent-media (npm)
- Aug 14, 2025
Malicious code in hw-exception (npm)
- Aug 14, 2025
Malicious code in hw-customer-stats (npm)
- Aug 14, 2025
Malicious code in hw-currency (npm)
- Aug 14, 2025
Malicious code in hw-clientid (npm)
- Aug 14, 2025
Malicious code in hw-branding (npm)
- Aug 14, 2025
Malicious code in hw-banner (npm)
- Aug 14, 2025
Malicious code in hw-api-secret (npm)
- Aug 14, 2025
Malicious code in hw-angular-validator (npm)
- Aug 14, 2025
Malicious code in hw-affiliate-toast (npm)
- Aug 14, 2025
Malicious code in hustlejs (npm)
- Aug 14, 2025
Malicious code in huskyos (npm)
- Aug 14, 2025
Malicious code in husky-zenith-less-yonder (npm)
- Aug 14, 2025
Malicious code in husky-stratigraphy-gravity-orogeny (npm)
- Aug 14, 2025
Malicious code in husky-library-janus-supervisor (npm)
- Aug 14, 2025
Malicious code in hush_hptfz_u1ddr_valley (npm)
- Aug 14, 2025
Malicious code in hurge (npm)
- Aug 14, 2025
Malicious code in huqas_web (npm)
- Aug 14, 2025
Malicious code in huobi-trading-view-hbcloud (npm)
- Aug 14, 2025
Malicious code in huobi-bs-fe-common (npm)
- Aug 14, 2025
Malicious code in hunters (npm)
- Aug 14, 2025
Malicious code in hungarian (npm)
- Aug 14, 2025
Malicious code in hunexdlwgsybpizf (npm)
Page 5996 of 7,325