Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,204 total · sorted newest first- Aug 14, 2025
Malicious code in haven-z90ym-6l2pr-ember-project (npm)
- Aug 14, 2025
Malicious code in haven-y9kxr-qkcm0-grove-project (npm)
- Aug 14, 2025
Malicious code in haven-x5nz7-1h12l-obsidian-project (npm)
- Aug 14, 2025
Malicious code in haven-x3evf-636lr-iris-project (npm)
- Aug 14, 2025
Malicious code in haven-wyjzj-i1oih-frost-project (npm)
- Aug 14, 2025
Malicious code in haven-w6yjy-3d9rf-terra-project (npm)
- Aug 14, 2025
Malicious code in haven-sdk4c-zhbb0-fjord-project (npm)
- Aug 14, 2025
Malicious code in haven-qoxpr-q6vgc-zenith-project (npm)
- Aug 14, 2025
Malicious code in haven-ilsmr-kgh8y-ice-project (npm)
- Aug 14, 2025
Malicious code in haven-hj2xz-07tw6-jewel-project (npm)
- Aug 14, 2025
Malicious code in haven-dutwo-9afnl-lavender-project (npm)
- Aug 14, 2025
Malicious code in haven-bes9v-66v54-fern-project (npm)
- Aug 14, 2025
Malicious code in haven-bd1rs-tber9-solace-project (npm)
- Aug 14, 2025
Malicious code in haven-a2bca-taw6k-nymph-project (npm)
- Aug 14, 2025
Malicious code in haven-9yae4-l6wbd-ember-project (npm)
- Aug 14, 2025
Malicious code in haven-5ynlj-z2reg-raven-project (npm)
- Aug 14, 2025
Malicious code in haven-387xx-89mga-coral-project (npm)
- Aug 14, 2025
Malicious code in haven-2i52m-qglgk-star-project (npm)
- Aug 14, 2025
Malicious code in haven-23lrq-dpwho-pearl-project (npm)
- Aug 14, 2025
Malicious code in haven-1v0nt-fi8so-xenon-project (npm)
- Aug 14, 2025
Malicious code in haven-1ec7t-dogih-orbit-project (npm)
- Aug 14, 2025
Malicious code in havegive (npm)
- Aug 14, 2025
Malicious code in haucict (npm)
- Aug 14, 2025
Malicious code in hathway (npm)
- Aug 14, 2025
Malicious code in hathormobile (npm)
- Aug 14, 2025
Malicious code in hathor-wallet-headless (npm)
- Aug 14, 2025
Malicious code in hathor-wallet (npm)
- Aug 14, 2025
Malicious code in hathor-healthcheck-lib (npm)
- Aug 14, 2025
Malicious code in hatebu (npm)
- Aug 14, 2025
Malicious code in hatcraft (npm)
- Aug 14, 2025
Malicious code in hasulam (npm)
- Aug 14, 2025
Malicious code in hashdump (npm)
- Aug 14, 2025
Malicious code in hash-spy-mock-web-sed (npm)
- Aug 14, 2025
Malicious code in hash-sha256 (npm)
- Aug 14, 2025
Malicious code in hash-query-string-assert-catch (npm)
- Aug 14, 2025
Malicious code in hash-cloud-short-void-cluster (npm)
- Aug 14, 2025
Malicious code in hash-bash-easy-xi-table (npm)
- Aug 14, 2025
Malicious code in hasaweb (npm)
- Aug 14, 2025
Malicious code in hasard-core (npm)
- Aug 14, 2025
Malicious code in harvesting-utils (npm)
- Aug 14, 2025
Malicious code in harvesting-twitter (npm)
- Aug 14, 2025
Malicious code in harvesting-mongodb (npm)
- Aug 14, 2025
Malicious code in hartree (npm)
- Aug 14, 2025
Malicious code in harpjs (npm)
- Aug 14, 2025
Malicious code in harpia (npm)
- Aug 14, 2025
Malicious code in harp-yi7i7-gj0g0-dew-project (npm)
- Aug 14, 2025
Malicious code in harp-xru52-rref5-verdant-project (npm)
- Aug 14, 2025
Malicious code in harp-cdng6-y0md2-dawn-project (npm)
- Aug 14, 2025
Malicious code in harp-8uplv-sqsxc-harmony-project (npm)
- Aug 14, 2025
Malicious code in harp-8dtdy-0fmvk-glow-project (npm)
Page 6007 of 7,325