Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,488 total · sorted newest first- Sep 13, 2026
Malicious code in haruni-poke118 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke114 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke109 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke105 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_orangutan_lime-58 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harthat-api (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_otter_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke115 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke104 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke122 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke116 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harthat-cookie (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke107 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_warbler_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harthat-hash (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke113 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harshitajain (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harthat-chain (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke117 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_shark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_rhinoceros_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke121 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke102 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_swordfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_roadrunner_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke120 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harshitverma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke106 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_smelt_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke112 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke108 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hartree (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_roundworm_ivory-74 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke111 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_weasel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haruni-poke103 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_sole-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmony-runtime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harpia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harp-yi7i7-gj0g0-dew-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmony_tfhgo_4ay69_fable (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_clam_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmony-uww9b-qqxzw-lunar-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmony_ku8yn_h56k2_topaz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmony_d8lvx_ev6db_dream (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_mule-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmony_hwbu4_njhyw_jade (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_hookworm_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harsh_locust_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harp-cdng6-y0md2-dawn-project (npm)
1 compromised version
Page 606 of 7,330