Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,488 total · sorted newest first- Sep 13, 2026
Malicious code in health-cards-validation-sdk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hdeky (npm)
1 compromised version
- Sep 13, 2026
Malicious code in head-aqua-limpet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in head_orca_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in health-and-wellness-collab-macro-deploy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-eslint-mantle-lyra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-flare-hydrogeology-quito (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-x5nz7-1h12l-obsidian-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-z90ym-6l2pr-ember-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-xenobiology-prettier-stylelint-buffer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-sdk4c-zhbb0-fjord-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-hj2xz-07tw6-jewel-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-ora-celeste-toml (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawk-td-mocks (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-jupiter-morgan-equinox (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hazecod (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haywyre (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-wyjzj-i1oih-frost-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-volcanology-npm-delphinus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in havilland (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-ilsmr-kgh8y-ice-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-auriga-triton-extremophile (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-w6yjy-3d9rf-terra-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-aether-mesosphere-loopback (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hayes-teadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hazel-carrot-08sq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-jupiter-toml-comet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-jupiter-pulsar-spica (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-x3evf-636lr-iris-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-karma-cosmicsilence-yakutsk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hathway (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haxewumbo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-carina-oortcloud-gammarayburst (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hayalevi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-promise-exec-greatfilter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-prettier-quantumfoam-xenon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-1ec7t-dogih-orbit-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-dutwo-9afnl-lavender-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-y9kxr-qkcm0-grove-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-backend-farout-despina (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-sadr-buffer-heliophysics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawkingradiation-deneb-xanthus-higgs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawk-lib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-bd1rs-tber9-solace-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hawk_turquoise-58 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haven-qoxpr-q6vgc-zenith-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haseebtariq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hash-socket-slow-debug-interpret (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hassanbaguette (npm)
1 compromised version
Page 604 of 7,330