Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,499 total · sorted newest first- Sep 13, 2026
Malicious code in hariyono-68 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-82 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-79 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-80 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke42 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-100 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-102 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-74 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-73 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-83 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-101 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-71 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-103 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-67 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-63 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-69 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-104 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-66 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-105 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-76 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-78 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-72 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-81 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-64 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-77 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardytest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardhat-contract-deploy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke33 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke26 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardhat-waffle (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke31 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke40 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardhat-starter-kit (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke41 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke23 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke29 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardhat-deploy-others (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke19 (npm)
1 compromised version
Page 610 of 7,330