Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Aug 14, 2025
Malicious code in horizon-xylophone-fsj386-project (npm)
- Aug 14, 2025
Malicious code in horizon-vdqrx-5z7dm-ember-project (npm)
- Aug 14, 2025
Malicious code in horizon-utgdy-61qus-mystic-project (npm)
- Aug 14, 2025
Malicious code in horizon-sp (npm)
- Aug 14, 2025
Malicious code in horizon-octopus-rhk645-project (npm)
- Aug 14, 2025
Malicious code in horizon-mebjh-bw69m-song-project (npm)
- Aug 14, 2025
Malicious code in horizon-jc8hn-tnmjo-comet-project (npm)
- Aug 14, 2025
Malicious code in horizon-he4a0-y31v1-karma-project (npm)
- Aug 14, 2025
Malicious code in horizon-gorilla-zst235-project (npm)
- Aug 14, 2025
Malicious code in horizon-fr53a-wyawp-frost-project (npm)
- Aug 14, 2025
Malicious code in horizon-fern-syz975-project (npm)
- Aug 14, 2025
Malicious code in horizon-fern-bro318-project (npm)
- Aug 14, 2025
Malicious code in horizon-dragon-khi299-project (npm)
- Aug 14, 2025
Malicious code in horizon-df4f1-ig352-juniper-project (npm)
- Aug 14, 2025
Malicious code in horizon-7q1v0-dpx1u-nebula-project (npm)
- Aug 14, 2025
Malicious code in horadric.js (npm)
- Aug 14, 2025
Malicious code in hoptimist (npm)
- Aug 14, 2025
Malicious code in hopital (npm)
- Aug 14, 2025
Malicious code in hope-widget-xyz (npm)
- Aug 14, 2025
Malicious code in hoonshow (npm)
- Aug 14, 2025
Malicious code in hoomba (npm)
- Aug 14, 2025
Malicious code in hookie.js (npm)
- Aug 14, 2025
Malicious code in hooka-tools (npm)
- Aug 14, 2025
Malicious code in hook-listen-test (npm)
- Aug 14, 2025
Malicious code in hoodstats (npm)
- Aug 14, 2025
Malicious code in honrphys (npm)
- Aug 14, 2025
Malicious code in honeydew-yankee-ubpq (npm)
- Aug 14, 2025
Malicious code in honeydew-yankee-mthv (npm)
- Aug 14, 2025
Malicious code in honeydew-yankee-bravo-wjosv (npm)
- Aug 14, 2025
Malicious code in honeydew-xray-papa-xntxv (npm)
- Aug 14, 2025
Malicious code in honeydew-xqz-project (npm)
- Aug 14, 2025
Malicious code in honeydew-xigua-ieqf (npm)
- Aug 14, 2025
Malicious code in honeydew-xigua-gqho (npm)
- Aug 14, 2025
Malicious code in honeydew-xigua-aynr (npm)
- Aug 14, 2025
Malicious code in honeydew-vvb-project (npm)
- Aug 14, 2025
Malicious code in honeydew-victor-november-ibkty (npm)
- Aug 14, 2025
Malicious code in honeydew-victor-cherry-lalwt (npm)
- Aug 14, 2025
Malicious code in honeydew-vanilla-xigua-injij (npm)
- Aug 14, 2025
Malicious code in honeydew-vanilla-c6ge (npm)
- Aug 14, 2025
Malicious code in honeydew-va5-project (npm)
- Aug 14, 2025
Malicious code in honeydew-ugli-5jbd (npm)
- Aug 14, 2025
Malicious code in honeydew-tangerine-xray-heqld (npm)
- Aug 14, 2025
Malicious code in honeydew-tangerine-whiskey-ormij (npm)
- Aug 14, 2025
Malicious code in honeydew-romeo-nzgg (npm)
- Aug 14, 2025
Malicious code in honeydew-rjx-project (npm)
- Aug 14, 2025
Malicious code in honeydew-rj9-project (npm)
- Aug 14, 2025
Malicious code in honeydew-raspberry-lcxj (npm)
- Aug 14, 2025
Malicious code in honeydew-quebec-xdpl (npm)
- Aug 14, 2025
Malicious code in honeydew-pqv-project (npm)
- Aug 14, 2025
Malicious code in honeydew-papaya-kjuh (npm)
Page 6000 of 7,325