Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 29, 2026
Malicious code in @hrmony/api-gateway-service-config (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/valuenet (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/pladddform-infrastructure (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in @hrmony/belegerfassung-pladddform (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/devtool-configuration (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/lohndateien (npm)
1 compromised version
- Sep 29, 2026
Malicious code in @hrmony/pladddform-frontend (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in @hrmony/pladddform-core (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in @hrmony/gutscheinverwaltung (npm)
1 compromised version
- Sep 29, 2026
Malicious code in xeprews (npm)
1 compromised version
- Sep 29, 2026
Malicious code in exptred (npm)
1 compromised version
- Sep 29, 2026
Malicious code in exptrdd (npm)
1 compromised version
- Sep 29, 2026
Malicious code in exptredd (npm)
1 compromised version
- Sep 29, 2026
Malicious code in exprrdd (npm)
1 compromised version
- Sep 29, 2026
Malicious code in express-nodejs (npm)
1 compromised version
- Sep 29, 2026
Malicious code in exprdd (npm)
1 compromised version
- Sep 29, 2026
Malicious code in express-javascript (npm)
1 compromised version
- Sep 29, 2026
Malicious code in dotenv-precheck (npm)
3 compromised versions
- Sep 29, 2026
Malicious code in dotenv-preflight (npm)
1 compromised version
- Sep 29, 2026
Malicious code in react-nodejs (npm)
1 compromised version
- Sep 29, 2026
Malicious code in xeprews (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in exptredd (npm)
3 compromised versions
- Sep 29, 2026
Malicious code in exptred (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in exptrdd (npm)
1 compromised version
- Sep 29, 2026
Malicious code in exprrdd (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in express-nodejs (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in express-javascript (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in exprdd (npm)
2 compromised versions
- Sep 29, 2026
Malicious code in mini-hardhat (npm)
1 compromised version
- Sep 29, 2026
Malicious code in hardhat-zet (npm)
1 compromised version
- Sep 29, 2026
Malicious code in aseitylab (PyPI)
1 compromised version
- Sep 29, 2026
Malicious code in items-validator (npm)
1 compromised version
- Sep 29, 2026
Malicious code in rai6jaisahthaghee5ou-loader-package (npm)
1 compromised version
- Sep 29, 2026
Malicious code in hardhat-lock (npm)
1 compromised version
- Sep 29, 2026
Malicious code in native-env (npm)
1 compromised version
- Sep 29, 2026
Malicious code in test-agency-assignment (npm)
1 compromised version
- Sep 29, 2026
Malicious code in fabric-native-loader (npm)
1 compromised version
- Sep 29, 2026
Malicious code in dotenv-native (npm)
1 compromised version
- Sep 28, 2026
Malicious code in rai6jaisahthaghee5ou-loader-package (npm)
1 compromised version
- Sep 28, 2026
Malicious code in hardhat-zet (npm)
1 compromised version
- Sep 28, 2026
Malicious code in hardhat-lock (npm)
1 compromised version
- Sep 28, 2026
Malicious code in mini-hardhat (npm)
1 compromised version
- Sep 28, 2026
Malicious code in native-env (npm)
1 compromised version
- Sep 28, 2026
Malicious code in dotenv-native (npm)
1 compromised version
- Sep 28, 2026
Malicious code in fabric-native-loader (npm)
1 compromised version
- Sep 28, 2026
Malicious code in items-validator (npm)
2 compromised versions
- Sep 28, 2026
Malicious code in test-agency-assignment (npm)
1 compromised version
- Sep 28, 2026
Malicious code in llm-nebula (npm)
1 compromised version
- Sep 28, 2026
Malicious code in aseitylab (PyPI)
2 compromised versions
- Sep 28, 2026
Malicious code in llm-nebula (npm)
1 compromised version
Page 67 of 7,312