Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,499 total · sorted newest first- Sep 13, 2026
Malicious code in hariyono-poke62 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke49 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke61 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke40 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke57 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke38 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmonic_v8o5m_ho0xa_dusk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke56 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke41 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke51 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke42 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke52 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmoney (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmonic_a1ca2_ql76a_ocean (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmonic_bezft_36s9d_banyan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmony-common (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke35 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke50 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke55 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke37 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke53 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmlesspackage (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke59 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke46 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke58 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke60 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmonic_1ld6h_hkctz_pinnacle (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harmony-08d7w-43ckl-xanadu-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke47 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke116 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke113 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke118 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-87 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke107 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-86 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke121 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-84 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-98 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke25 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-94 (npm)
1 compromised version
Page 608 of 7,330