Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,488 total · sorted newest first- Sep 13, 2026
Malicious code in healthy_sailfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hearsay-design-system (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_sole_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heartstone-nft-collcetion574 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_angelfish-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy-copper-sheep (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heather_6ngoh_px1dt_aspen (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heather_8j6tf_vvmrc_iris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_rabbit_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heartstone-nft-collcetion306 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heartstone-nft-collcetion-free- (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_basilisk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heartstone-nft-collcetion397 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heather_8n2kz_dg94m_cascade (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_badger_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthbridge-design-system (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heath-soluble-pot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_scallop_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_heron_azure-92 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_junglefowl_replicate_automation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heavy-magenta-snail (npm)
1 compromised version
- Sep 13, 2026
Malicious code in health-check-nodejs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heartstone-nft-collcetion957 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hearthwiz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_swordtail_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_chickadee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthbot-container (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hearforme (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heath-tea-archive (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heartstone-nft-collcetion992 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heather_vhnao_2gvsk_paradise (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_ocelot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heather_9km8u_9mvz3_jigsaw (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heart-replace-whistle (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heather_bq7g3_nf4xz_raven (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heatwallet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hease-js-api (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_crane_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy-tan-quail (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy-green-wildfowl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hearth-95bye-rdp1t-rose-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heavy-amaranth-vicuna (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_fox_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hearth-lvynh-a7r5l-paradise-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy-blue-leech (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy-lime-bee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy_nightingale_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in heartstone-nft-collcetion972 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hearth-xmwq7-1tcpj-aurora-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in healthy-ivory-wildcat (npm)
1 compromised version
Page 602 of 7,330