Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Aug 14, 2025
Malicious code in hsbc-modal (npm)
- Aug 14, 2025
Malicious code in hs_codes (npm)
- Aug 14, 2025
Malicious code in hs-sha3 (npm)
- Aug 14, 2025
Malicious code in hs-api-next-gen (npm)
- Aug 14, 2025
Malicious code in hrodei (npm)
- Aug 14, 2025
Malicious code in hqsql (npm)
- Aug 14, 2025
Malicious code in hqlkgubcovjiskta (npm)
- Aug 14, 2025
Malicious code in hqj0rx (npm)
- Aug 14, 2025
Malicious code in hpygdtsiukcxolvw (npm)
- Aug 14, 2025
Malicious code in hpmm (npm)
- Aug 14, 2025
Malicious code in hpioj5 (npm)
- Aug 14, 2025
Malicious code in hpfeedirc (npm)
- Aug 14, 2025
Malicious code in hp1dma (npm)
- Aug 14, 2025
Malicious code in hp-svc-facs-store (npm)
- Aug 14, 2025
Malicious code in howwrong (npm)
- Aug 14, 2025
Malicious code in how-to-npm-tester-lee (npm)
- Aug 14, 2025
Malicious code in how-to-get-unlimited-coin-master-spins-daily-in-2023-efkedz (npm)
- Aug 14, 2025
Malicious code in how-to-get-free-fortnite-vbucks-2023-zdkdz (npm)
- Aug 14, 2025
Malicious code in how-to-get-free-coin-master-spins-2023-working-and-updated-jjeef (npm)
- Aug 14, 2025
Malicious code in how-to-get-followers-on-instagram-without-following (npm)
- Aug 14, 2025
Malicious code in how-iget-free-fortnite-vbucks-daily-jfkze (npm)
- Aug 14, 2025
Malicious code in hoverpuck (npm)
- Aug 14, 2025
Malicious code in housefind (npm)
- Aug 14, 2025
Malicious code in hottg47gggg (npm)
- Aug 14, 2025
Malicious code in hotline-frontend (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in HotJS (npm)
- Aug 14, 2025
Malicious code in hotelsys (npm)
- Aug 14, 2025
Malicious code in hotel-zucchini-sierra-ehqmk (npm)
- Aug 14, 2025
Malicious code in hotel-xray-pjod (npm)
- Aug 14, 2025
Malicious code in hotel-xigua-nfoh (npm)
- Aug 14, 2025
Malicious code in hotel-xgw-project (npm)
- Aug 14, 2025
Malicious code in hotel-xenon-m0k3 (npm)
- Aug 14, 2025
Malicious code in hotel-whiskey-alpha-qwqlo (npm)
- Aug 14, 2025
Malicious code in hotel-v6f-project (npm)
- Aug 14, 2025
Malicious code in hotel-u7v-project (npm)
- Aug 14, 2025
Malicious code in hotel-strawberry-lemon-cfqzi (npm)
- Aug 14, 2025
Malicious code in hotel-romeo-ifxx (npm)
- Aug 14, 2025
Malicious code in hotel-re0-project (npm)
- Aug 14, 2025
Malicious code in hotel-raspberry-uogt (npm)
- Aug 14, 2025
Malicious code in hotel-pr7-project (npm)
- Aug 14, 2025
Malicious code in hotel-oscar-fig-hmfhw (npm)
- Aug 14, 2025
Malicious code in hotel-o8p-project (npm)
- Aug 14, 2025
Malicious code in hotel-o0e-project (npm)
- Aug 14, 2025
Malicious code in hotel-nl6-project (npm)
- Aug 14, 2025
Malicious code in hotel-mike-zucchini-tbpst (npm)
- Aug 14, 2025
Malicious code in hotel-mango-ypoo (npm)
- Aug 14, 2025
Malicious code in hotel-lima-tango-xcygz (npm)
- Aug 14, 2025
Malicious code in hotel-l19-project (npm)
- Aug 14, 2025
Malicious code in hotel-kiwi-22a8 (npm)
- Aug 14, 2025
Malicious code in hotel-kilo-jrme (npm)
Page 5998 of 7,325