Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,204 total · sorted newest first- Aug 14, 2025
Malicious code in hendra-taiwan91-sukiwir (npm)
- Aug 14, 2025
Malicious code in hendra-semur33-breki (npm)
- Aug 14, 2025
Malicious code in hendra-saguer49-breki (npm)
- Aug 14, 2025
Malicious code in hendra-miemee87-breki (npm)
- Aug 14, 2025
Malicious code in hendra-brengkes62-breki (npm)
- Aug 14, 2025
Malicious code in hemnet (npm)
- Aug 14, 2025
Malicious code in helptools (npm)
- Aug 14, 2025
Malicious code in helptml (npm)
- Aug 14, 2025
Malicious code in helowrold (npm)
- Aug 14, 2025
Malicious code in helmet-spectroscopy-nucleosynthesis-jsonp (npm)
- Aug 14, 2025
Malicious code in helmet-lepton-baryon-gravitationalwave (npm)
- Aug 14, 2025
Malicious code in helmet-framework-concurrently-jovian (npm)
- Aug 14, 2025
Malicious code in helmet-bellatrix-kastra-pulsar (npm)
- Aug 14, 2025
Malicious code in helmelar (npm)
- Aug 14, 2025
Malicious code in hellstorm (npm)
- Aug 14, 2025
Malicious code in hellonew (npm)
- Aug 14, 2025
Malicious code in helloModule (npm)
- Aug 14, 2025
Malicious code in hellomav (npm)
- Aug 14, 2025
Malicious code in hello_ltb (npm)
- Aug 14, 2025
Malicious code in hello-world-target (npm)
- Aug 14, 2025
Malicious code in hello-world-lupin (npm)
- Aug 14, 2025
Malicious code in hello-world-from-lupin-99 (npm)
- Aug 14, 2025
Malicious code in hello-world-from-lupin-95 (npm)
- Aug 14, 2025
Malicious code in hello-cloud (npm)
- Aug 14, 2025
Malicious code in hellcity (npm)
- Aug 14, 2025
Malicious code in heliosphere-wormhole-mqqr (npm)
- Aug 14, 2025
Malicious code in helios-ultra-rollup-plugin-gridsome (npm)
- Aug 14, 2025
Malicious code in helios-joviology-changelog-less-loader (npm)
- Aug 14, 2025
Malicious code in helios-coronalmassejection-carina-crust (npm)
- Aug 14, 2025
Malicious code in heliophysics-gulp-interstellarmedium-asteroid (npm)
- Aug 14, 2025
Malicious code in helicopter-xigua-m89x (npm)
- Aug 14, 2025
Malicious code in helicopter-nectarine-18ix (npm)
- Aug 14, 2025
Malicious code in helicopter-hotel-x38o (npm)
- Aug 14, 2025
Malicious code in helicopter-airplane-4eq8 (npm)
- Aug 14, 2025
Malicious code in heka-react-bootstrap-electron-builder-puppeteer (npm)
- Aug 14, 2025
Malicious code in heka-native-frontend-lint-staged (npm)
- Aug 14, 2025
Malicious code in heka-luminescence-parsec-janus (npm)
- Aug 14, 2025
Malicious code in heka-fornax-antares-phenomic (npm)
- Aug 14, 2025
Malicious code in heiban (npm)
- Aug 14, 2025
Malicious code in hedgehog-yucca-wxs277-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-xerus-cpl405-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-willow-klf228-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-whale-pdg410-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-vortex-hiz322-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-registry (npm)
- Aug 14, 2025
Malicious code in hedgehog-quasar-ppf530-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-orchid-phg379-project (npm)
- Aug 14, 2025
Malicious code in hedgehog-aroma-swh506-project (npm)
- Aug 14, 2025
Malicious code in hebiteiki (npm)
- Aug 14, 2025
Malicious code in heather_vhnao_2gvsk_paradise (npm)
Page 6005 of 7,325