Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,204 total · sorted newest first- Aug 14, 2025
Malicious code in harp-86myn-b5m8t-dusk-project (npm)
- Aug 14, 2025
Malicious code in harmony_w1byd_ibuca_whisper (npm)
- Aug 14, 2025
Malicious code in harmony_n5gop_4pegj_cascade (npm)
- Aug 14, 2025
Malicious code in harmony_hwbu4_njhyw_jade (npm)
- Aug 14, 2025
Malicious code in harmony_d8lvx_ev6db_dream (npm)
- Aug 14, 2025
Malicious code in harmony_2kg4k_k65to_xenith (npm)
- Aug 14, 2025
Malicious code in harmony-v4atz-4fx7f-zenith-project (npm)
- Aug 14, 2025
Malicious code in harmony-uww9b-qqxzw-lunar-project (npm)
- Aug 14, 2025
Malicious code in harmony-runtime (npm)
- Aug 14, 2025
Malicious code in harmony-common (npm)
- Aug 14, 2025
Malicious code in harmony-1inh6-b1o7d-harp-project (npm)
- Aug 14, 2025
Malicious code in harmony-08d7w-43ckl-xanadu-project (npm)
- Aug 14, 2025
Malicious code in harmonic_v8o5m_ho0xa_dusk (npm)
- Aug 14, 2025
Malicious code in harmonic_bezft_36s9d_banyan (npm)
- Aug 14, 2025
Malicious code in harmonic_a1ca2_ql76a_ocean (npm)
- Aug 14, 2025
Malicious code in harmonic_9v7xh_78x6j_twilight (npm)
- Aug 14, 2025
Malicious code in harmonic_1ld6h_hkctz_pinnacle (npm)
- Aug 14, 2025
Malicious code in harmoney (npm)
- Aug 14, 2025
Malicious code in harmlesspackage (npm)
- Aug 14, 2025
Malicious code in harman (npm)
- Aug 14, 2025
Malicious code in hardytest (npm)
- Aug 14, 2025
Malicious code in hardy_har_har (npm)
- Aug 14, 2025
Malicious code in hardinfo (npm)
- Aug 14, 2025
Malicious code in hardhat-waffle (npm)
- Aug 14, 2025
Malicious code in hardhat-contract-deploy (npm)
- Aug 14, 2025
Malicious code in harbor-xenon-dne615-project (npm)
- Aug 14, 2025
Malicious code in harbor-uplift-vkr207-project (npm)
- Aug 14, 2025
Malicious code in harbor-tornado-gaq963-project (npm)
- Aug 14, 2025
Malicious code in harbor-river-xur763-project (npm)
- Aug 14, 2025
Malicious code in harbor-reef-inz755-project (npm)
- Aug 14, 2025
Malicious code in harbor-rainbow-s7vp (npm)
- Aug 14, 2025
Malicious code in harbor-prairie-kta125-project (npm)
- Aug 14, 2025
Malicious code in harbor-nugget-qyw196-project (npm)
- Aug 14, 2025
Malicious code in harbor-maple-jwaq (npm)
- Aug 14, 2025
Malicious code in harbor-lettuce-yl8i (npm)
- Aug 14, 2025
Malicious code in harbor-jewel-rxy620-project (npm)
- Aug 14, 2025
Malicious code in harbor-india-eqi7 (npm)
- Aug 14, 2025
Malicious code in harbor-grove-yvc860-project (npm)
- Aug 14, 2025
Malicious code in harbor-ferry-afx0 (npm)
- Aug 14, 2025
Malicious code in harbor-eggplant-gwqy (npm)
- Aug 14, 2025
Malicious code in harbor-chime-mpr471-project (npm)
- Aug 14, 2025
Malicious code in harbor-caravan-hvj800-project (npm)
- Aug 14, 2025
Malicious code in harbor-bonfire-qwl670-project (npm)
- Aug 14, 2025
Malicious code in harbor-bonfire-fqx182-project (npm)
- Aug 14, 2025
Malicious code in harbor-aspen-dmp363-project (npm)
- Aug 14, 2025
Malicious code in harbor-apple-6ip0 (npm)
- Aug 14, 2025
Malicious code in haraka-plugin-footer (npm)
- Aug 14, 2025
Malicious code in hapico (npm)
- Aug 14, 2025
Malicious code in hapi-slidev-mesosphere-standard (npm)
- Aug 14, 2025
Malicious code in hapi-services (npm)
Page 6008 of 7,325