Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,499 total · sorted newest first- Sep 13, 2026
Malicious code in haritono-poke3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke38 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke34 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardhat-contract (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_vole_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_walrus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardhat-node (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardinfo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke25 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hari-zxcv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardhat-common (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke27 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_vulture_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hardy_har_har (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke36 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke35 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke30 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke37 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke39 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_rooster-teagooddev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_heron_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_kangaroo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_tick_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_kingfisher_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_prawn_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_crocodile_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_ladybug_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_pinniped_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_rabbit_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_goose_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_mockingbird-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-bonfire-qwl670-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_tarantula_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-maple-jwaq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_toucan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_camel_scarlet-90 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard-turquoise-spider (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-nugget-qyw196-project (npm)
1 compromised version
Page 611 of 7,330