Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,204 total · sorted newest first- Aug 14, 2025
Malicious code in heather_bq7g3_nf4xz_raven (npm)
- Aug 14, 2025
Malicious code in heather_9km8u_9mvz3_jigsaw (npm)
- Aug 14, 2025
Malicious code in heather_8n2kz_dg94m_cascade (npm)
- Aug 14, 2025
Malicious code in heather_8j6tf_vvmrc_iris (npm)
- Aug 14, 2025
Malicious code in heather_6ngoh_px1dt_aspen (npm)
- Aug 14, 2025
Malicious code in hease-js-api (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion972 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion574 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion397 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion306 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion131 (npm)
- Aug 14, 2025
Malicious code in heartstone-nft-collcetion-free- (npm)
- Aug 14, 2025
Malicious code in hearthwiz (npm)
- Aug 14, 2025
Malicious code in hearth-xmwq7-1tcpj-aurora-project (npm)
- Aug 14, 2025
Malicious code in hearth-lvynh-a7r5l-paradise-project (npm)
- Aug 14, 2025
Malicious code in hearth-95bye-rdp1t-rose-project (npm)
- Aug 14, 2025
Malicious code in hearforme (npm)
- Aug 14, 2025
Malicious code in healge (npm)
- Aug 14, 2025
Malicious code in heading (npm)
- Aug 14, 2025
Malicious code in headache (npm)
- Aug 14, 2025
Malicious code in hdworld (npm)
- Aug 14, 2025
Malicious code in hdkye (npm)
- Aug 14, 2025
Malicious code in hdfkit (npm)
- Aug 14, 2025
Malicious code in hdeky (npm)
- Aug 14, 2025
Malicious code in hdebug (npm)
- Aug 14, 2025
Malicious code in hcrckiosk (npm)
- Aug 14, 2025
Malicious code in hcompare (npm)
- Aug 14, 2025
Malicious code in hcdemos (npm)
- Aug 14, 2025
Malicious code in hbtrack (npm)
- Aug 14, 2025
Malicious code in hbqxpro (npm)
- Aug 14, 2025
Malicious code in hbmediaelement (npm)
- Aug 14, 2025
Malicious code in hazel-windmill-tyeg (npm)
- Aug 14, 2025
Malicious code in hazel-whiskey-l2ig (npm)
- Aug 14, 2025
Malicious code in hazel-vinegar-mx3y (npm)
- Aug 14, 2025
Malicious code in hazel-redshift-60dx (npm)
- Aug 14, 2025
Malicious code in hazel-pier-9a36 (npm)
- Aug 14, 2025
Malicious code in hazel-lunar-nemb (npm)
- Aug 14, 2025
Malicious code in hazel-carrot-08sq (npm)
- Aug 14, 2025
Malicious code in hazecod (npm)
- Aug 14, 2025
Malicious code in haywyre (npm)
- Aug 14, 2025
Malicious code in hayalevi (npm)
- Aug 14, 2025
Malicious code in haxewumbo (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-promise-exec-greatfilter (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-prettier-quantumfoam-xenon (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-jupiter-pulsar-spica (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-deneb-xanthus-higgs (npm)
- Aug 14, 2025
Malicious code in hawkingradiation-auriga-triton-extremophile (npm)
- Aug 14, 2025
Malicious code in hawk-td-mocks (npm)
- Aug 14, 2025
Malicious code in hawk-lib (npm)
- Aug 14, 2025
Malicious code in havilland (npm)
Page 6006 of 7,325