Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Aug 14, 2025
Malicious code in hollow-moose-aeu448-project (npm)
- Aug 14, 2025
Malicious code in hollow-lagoon-xew578-project (npm)
- Aug 14, 2025
Malicious code in hollow-falcon-gzs027-project (npm)
- Aug 14, 2025
Malicious code in hollow-elephant-rdz573-project (npm)
- Aug 14, 2025
Malicious code in hollow-ecosystem-rth157-project (npm)
- Aug 14, 2025
Malicious code in hollow-dewdrop-aic413-project (npm)
- Aug 14, 2025
Malicious code in hollow-asteroid-svq681-project (npm)
- Aug 14, 2025
Malicious code in holhos (npm)
- Aug 14, 2025
Malicious code in holesaw (npm)
- Aug 14, 2025
Malicious code in holdingread-paypal (npm)
- Aug 14, 2025
Malicious code in hockeygm (npm)
- Aug 14, 2025
Malicious code in hocizrfnkskmvygw (npm)
- Aug 14, 2025
Malicious code in hoauth (npm)
- Aug 14, 2025
Malicious code in hn-facets-ng-core (npm)
- Aug 14, 2025
Malicious code in hmtqkr (npm)
- Aug 14, 2025
Malicious code in hm-graphs (npm)
- Aug 14, 2025
Malicious code in hltstudy (npm)
- Aug 14, 2025
Malicious code in hlscore (npm)
- Aug 14, 2025
Malicious code in hl7.fhir.us.davinci-hrex (npm)
- Aug 14, 2025
Malicious code in hl7.fhir.us.core (npm)
- Aug 14, 2025
Malicious code in hl7.fhir.r4.core (npm)
- Aug 14, 2025
Malicious code in hktoolkit (npm)
- Aug 14, 2025
Malicious code in hkpmfygezqtjdras (npm)
- Aug 14, 2025
Malicious code in hkjfhgdk (npm)
- Aug 14, 2025
Malicious code in hkjdfhdsfhjkhsdfkhg (npm)
- Aug 14, 2025
Malicious code in hkit (npm)
- Aug 14, 2025
Malicious code in hkhkhk (npm)
- Aug 14, 2025
Malicious code in hkdoekpmlfcjygtx (npm)
- Aug 14, 2025
Malicious code in hkbudget (npm)
- Aug 14, 2025
Malicious code in hkaga-ana (npm)
- Aug 14, 2025
Malicious code in hkaga-ama (npm)
- Aug 14, 2025
Malicious code in hjvgvgggx (npm)
- Aug 14, 2025
Malicious code in hjrivaeclknbouyf (npm)
- Aug 14, 2025
Malicious code in hjgsawkkrqdivxeo (npm)
- Aug 14, 2025
Malicious code in hiwaydb (npm)
- Aug 14, 2025
Malicious code in hivemed-logic (npm)
- Aug 14, 2025
Malicious code in hitler (npm)
- Aug 14, 2025
Malicious code in hitground (npm)
- Aug 14, 2025
Malicious code in histories (npm)
- Aug 14, 2025
Malicious code in histonat (npm)
- Aug 14, 2025
Malicious code in hiredo (npm)
- Aug 14, 2025
Malicious code in hirake (npm)
- Aug 14, 2025
Malicious code in hiptime (npm)
- Aug 14, 2025
Malicious code in hipstest (npm)
- Aug 14, 2025
Malicious code in hipsterbg (npm)
- Aug 14, 2025
Malicious code in hippocms (npm)
- Aug 14, 2025
Malicious code in hipmunk (npm)
- Aug 14, 2025
Malicious code in hiplib (npm)
- Aug 14, 2025
Malicious code in hiot-messaging (npm)
- Aug 14, 2025
Malicious code in hiot-api (npm)
Page 6003 of 7,325