Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,499 total · sorted newest first- Sep 13, 2026
Malicious code in happy_cow-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_lemming_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_bobolink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-winston-halley-fornax (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapico (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_gamefowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_ermine_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_bandicoot_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_bison_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_kiwi_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_earwig_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_catfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_leopard_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in happy_cricket_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-csv-zenobia-xanadu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-slidev-mesosphere-standard (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-inquirer-kastra-event (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-prompts-markdown-pdf-csrf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-morgan-dotenv-parse-variables-sirius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-orogeny-tardigrade-rate-limiter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-event-store (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-mocha-geochemistry-thermosphere (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-terser-webpack-plugin-cz-conventional-changelog-despina (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-mutation-kronos-deimos (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-meteor-chromedriver-karma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-jovian-hugo-umbriel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-run-script-draco-hermes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-hyperion-corvus-upgrade (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-services (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-miranda-changelog-ini (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-iota-pipe-selenium (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-selenium (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-kafka-node (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-dynamo-janus-altair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-node-avro-io (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-public-unuk-publish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-pulsar-xanthus-avior (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-prosthetics-thermochronology-galaxy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-doc-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-pm2-event-element-ui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-markdown-dotenv-spinner (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-lyra-europa-convict (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-proteomics-whitedwarf-nucleosynthesis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-link-dotenv-registry (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-dynamo-archaeoastronomy-leda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-express-avior-ignite (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-logstash-tester (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hapi-data (npm)
1 compromised version
Page 613 of 7,330