Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 29, 2026
Malware in @hrmony/pladddform-testing
1 compromised version
- Sep 29, 2026
Malware in @hrmony/pladddform-infrastructure
1 compromised version
- Sep 29, 2026
Malware in @hrmony/hyper-json-builder
1 compromised version
- Sep 29, 2026
Malware in @hrmony/devtool-configuration
1 compromised version
- Sep 29, 2026
Malware in @hrmony/pladddform-core
1 compromised version
- Sep 29, 2026
Malware in @hrmony/pladddform-config
1 compromised version
- Sep 29, 2026
Malware in @hrmony/benefit-sachbezug
1 compromised version
- Sep 29, 2026
Malware in @hrmony/cdk-constructs
1 compromised version
- Sep 29, 2026
Malware in @hrmony/interfaces
1 compromised version
- Sep 29, 2026
Malware in @hrmony/organisationsverwaltung
1 compromised version
- Sep 29, 2026
Malware in @hrmony/gutscheinverwaltung
1 compromised version
- Sep 29, 2026
Malware in @hrmony/component-library
1 compromised version
- Sep 29, 2026
Malware in @hrmony/pladddform-cli
1 compromised version
- Sep 29, 2026
Malware in @hrmony/mailer-pladddform
1 compromised version
- Sep 29, 2026
Malware in @hrmony/pladddform-partner-registry
1 compromised version
- Sep 29, 2026
Malware in @hrmony/middlewares
1 compromised version
- Sep 29, 2026
Malware in @hrmony/pladddform-frontend
1 compromised version
- Sep 29, 2026
Malware in @hrmony/pladddform-codegen
1 compromised version
- Sep 29, 2026
Malware in @hrmony/account-management
1 compromised version
- Sep 29, 2026
Malware in @hrmony/kit-5
1 compromised version
- Sep 29, 2026
Malware in @hrmony/benefit-mobilitaet
1 compromised version
- Sep 29, 2026
Malware in @hrmony/benefit-internetzuschuss
1 compromised version
- Sep 29, 2026
Malware in @hrmony/belegerfassung-pladddform
1 compromised version
- Sep 29, 2026
Malware in @hrmony/app-gateway-templates
1 compromised version
- Sep 29, 2026
Malware in @hrmony/api-gateway-service-config
1 compromised version
- Sep 29, 2026
Malware in @hrmony/benefit-essenszuschuss
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/kit-1 (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/kit (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/kit-4 (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/kit-5 (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in @hrmony/benefit-essenszuschuss (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/account-management (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/app-gateway-templates (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/interfaces (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/benefit-internetzuschuss (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/cdk-constructs (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/benefit-mobilitaet (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/organisationsverwaltung (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/benefit-sachbezug (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/benefitverwaltung (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/pladddform-application (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/middlewares (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/mailer-pladddform (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/component-library (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/pladddform-codegen (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/pladddform-config (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/pladddform-cli (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/pladddform-shared-infrastructure (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/pladddform-partner-registry (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/pladddform-testing (npm)
1 compromised version
Page 66 of 7,312