Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Aug 14, 2025
Malicious code in honeycomb-kaleidoscope-jmn345-project (npm)
- Aug 14, 2025
Malicious code in honeycomb-jasmine-uho811-project (npm)
- Aug 14, 2025
Malicious code in honeycomb-jasmine-cjr567-project (npm)
- Aug 14, 2025
Malicious code in honeycomb-glade-ckc132-project (npm)
- Aug 14, 2025
Malicious code in honeycomb-glacier-hye029-project (npm)
- Aug 14, 2025
Malicious code in honeycomb-butterfly-yrp574-project (npm)
- Aug 14, 2025
Malicious code in honeybird (npm)
- Aug 14, 2025
Malicious code in honeybase (npm)
- Aug 14, 2025
Malicious code in honey_ty0o2_jv1xm_infinity (npm)
- Aug 14, 2025
Malicious code in honey-zenith-vzw435-project (npm)
- Aug 14, 2025
Malicious code in honey-yacht-ksy900-project (npm)
- Aug 14, 2025
Malicious code in honey-xerox-scg393-project (npm)
- Aug 14, 2025
Malicious code in honey-wisp-pws898-project (npm)
- Aug 14, 2025
Malicious code in honey-volcano-hki072-project (npm)
- Aug 14, 2025
Malicious code in honey-tundra-tah530-project (npm)
- Aug 14, 2025
Malicious code in honey-quasar-gwd409-project (npm)
- Aug 14, 2025
Malicious code in honey-penguin-czs624-project (npm)
- Aug 14, 2025
Malicious code in honey-nymph-yce559-project (npm)
- Aug 14, 2025
Malicious code in honey-mist-ary569-project (npm)
- Aug 14, 2025
Malicious code in honey-jade-qcr844-project (npm)
- Aug 14, 2025
Malicious code in honey-iris-zki944-project (npm)
- Aug 14, 2025
Malicious code in honey-infinity-ooh364-project (npm)
- Aug 14, 2025
Malicious code in honey-cliff-tnd256-project (npm)
- Aug 14, 2025
Malicious code in honey-acorn-pec137-project (npm)
- Aug 14, 2025
Malicious code in homomaid (npm)
- Aug 14, 2025
Malicious code in homoglyphs (npm)
- Aug 14, 2025
Malicious code in homey-device-discovery (npm)
- Aug 14, 2025
Malicious code in homework-module-14 (npm)
- Aug 14, 2025
Malicious code in homepod (npm)
- Aug 14, 2025
Malicious code in homematic-js-km200 (npm)
- Aug 14, 2025
Malicious code in homebridge-platform-smartac-f659675 (npm)
- Aug 14, 2025
Malicious code in homebridge-dyson (npm)
- Aug 14, 2025
Malicious code in homebridge-433mhz-light (npm)
- Aug 14, 2025
Malicious code in home-device-inventory (npm)
- Aug 14, 2025
Malicious code in homals (npm)
- Aug 14, 2025
Malicious code in holography-heka-mesosphere-biomimicry (npm)
- Aug 14, 2025
Malicious code in holography-ganymede-proxima-hexo (npm)
- Aug 14, 2025
Malicious code in holography-entanglement-ignite-chalk (npm)
- Aug 14, 2025
Malicious code in holography-charon-axios-development (npm)
- Aug 14, 2025
Malicious code in hologramm (npm)
- Aug 14, 2025
Malicious code in hologram-taurus-lightyear-auth0 (npm)
- Aug 14, 2025
Malicious code in hologram-oscillation-rehype-await (npm)
- Aug 14, 2025
Malicious code in hologram-meteor-scorpius-jabbah (npm)
- Aug 14, 2025
Malicious code in hologram-ini-elara-dysonswarm (npm)
- Aug 14, 2025
Malicious code in hologram-cors-quito-string (npm)
- Aug 14, 2025
Malicious code in hollywood-hdtv-shield-server (npm)
- Aug 14, 2025
Malicious code in hollow-waterfall-bez687-project (npm)
- Aug 14, 2025
Malicious code in hollow-utopia-sex755-project (npm)
- Aug 14, 2025
Malicious code in hollow-umbra-xdi001-project (npm)
- Aug 14, 2025
Malicious code in hollow-tornado-itq402-project (npm)
Page 6002 of 7,325