Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,499 total · sorted newest first- Sep 13, 2026
Malicious code in haraka-plugin-footer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_snake_indigo-15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-caravan-hvj800-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard-turquoise-guineafowl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-uplift-vkr207-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-grove-yvc860-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-jewel-rxy620-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-fjord-wkz821-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_partridge_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-ferry-afx0 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-container-webhook (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_xerinae_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_swan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_centipede_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-apple-6ip0 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_bandicoot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_raven_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-prairie-kta125-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happychat-connection (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-reef-inz755-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_silkworm_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_orangutan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_cod_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_crawdad_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_lobster_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_peafowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_whippet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-xenon-dne615-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-tornado-gaq963-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-rainbow-s7vp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-india-eqi7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard-emerald-cardinal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_quail_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_shrimp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-river-xur763-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_bandicoot_crimson-14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-aspen-dmp363-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-eggplant-gwqy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-lettuce-yl8i (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_booby_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-chime-mpr471-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_tahr_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in harbor-bonfire-fqx182-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hard_barnacle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_wallaby_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_lizard_white-56 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_goat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-zenobia-superagent-geodynamo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy-sapphire-guppy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-zenobia-ophiuchus-quantum (npm)
1 compromised version
Page 612 of 7,330