Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in haiwei (npm)
- Aug 14, 2025
Malicious code in haiscommondclient (npm)
- Aug 14, 2025
Malicious code in haiscommond (npm)
- Aug 14, 2025
Malicious code in haircolor (npm)
- Aug 14, 2025
Malicious code in haikuary (npm)
- Aug 14, 2025
Malicious code in haijiao (npm)
- Aug 14, 2025
Malicious code in haeui (npm)
- Aug 14, 2025
Malicious code in hadron-volcanology-subscription-auth (npm)
- Aug 14, 2025
Malicious code in hadron-planetology-izar-semantic-release (npm)
- Aug 14, 2025
Malicious code in hadron-ophiuchus-bootstrap-lacerta (npm)
- Aug 14, 2025
Malicious code in hadqmvognjrbluxe (npm)
- Aug 14, 2025
Malicious code in hadianto-rujak13-kuki (npm)
- Aug 14, 2025
Malicious code in hadianto-nasiuduk70-breki (npm)
- Aug 14, 2025
Malicious code in hadianto-nasi20-sukiwir (npm)
- Aug 14, 2025
Malicious code in hadianto-mieayam57-sukiwir (npm)
- Aug 14, 2025
Malicious code in hadianto-mendut74-breki (npm)
- Aug 14, 2025
Malicious code in hadianto-martabak73-breki (npm)
- Aug 14, 2025
Malicious code in hadianto-lengko50-kuki (npm)
- Aug 14, 2025
Malicious code in hadianto-kue89-breki (npm)
- Aug 14, 2025
Malicious code in hadianto-klipo99-breki (npm)
- Aug 14, 2025
Malicious code in hadi-tumis40-kuki (npm)
- Aug 14, 2025
Malicious code in hadi-lupis61-sukiwir (npm)
- Aug 14, 2025
Malicious code in hadi-kupat14-sukiwir (npm)
- Aug 14, 2025
Malicious code in hadi-kemplang8-sukiwir (npm)
- Aug 14, 2025
Malicious code in hadi-jamblang63-sukiwir (npm)
- Aug 14, 2025
Malicious code in hadi-gudeg60-kuki (npm)
- Aug 14, 2025
Malicious code in hadean (npm)
- Aug 14, 2025
Malicious code in hackywaky (npm)
- Aug 14, 2025
Malicious code in hackvault (npm)
- Aug 14, 2025
Malicious code in hackuoft (npm)
- Aug 14, 2025
Malicious code in hackua (npm)
- Aug 14, 2025
Malicious code in hacktunes (npm)
- Aug 14, 2025
Malicious code in hackplus (npm)
- Aug 14, 2025
Malicious code in hackml (npm)
- Aug 14, 2025
Malicious code in hacklocal (npm)
- Aug 14, 2025
Malicious code in hackfsu (npm)
- Aug 14, 2025
Malicious code in hackcdmx (npm)
- Aug 14, 2025
Malicious code in hack0xme (npm)
- Aug 14, 2025
Malicious code in hachowm (npm)
- Aug 14, 2025
Malicious code in habite (npm)
- Aug 14, 2025
Malicious code in habblitz (npm)
- Aug 14, 2025
Malicious code in habarihub (npm)
- Aug 14, 2025
Malicious code in haba-tea (npm)
- Aug 14, 2025
Malicious code in h65vd2 (npm)
- Aug 14, 2025
Malicious code in h4x0r-dz01 (npm)
- Aug 14, 2025
Malicious code in h4x0r-dz-test (npm)
- Aug 14, 2025
Malicious code in h2-test-remix-oxygen (npm)
- Aug 14, 2025
Malicious code in h2-test-hydrogen-remix (npm)
- Aug 14, 2025
Malicious code in h2-test-hydrogen (npm)
- Aug 14, 2025
Malicious code in h1-cli-ext-storage-vault (npm)
Page 6010 of 7,324