Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in gymarb (npm)
- Aug 14, 2025
Malicious code in gym-http-api (npm)
- Aug 14, 2025
Malicious code in gyf-api-game-username (npm)
- Aug 14, 2025
Malicious code in gwodot (npm)
- Aug 14, 2025
Malicious code in gvdesign (npm)
- Aug 14, 2025
Malicious code in gvargas (npm)
- Aug 14, 2025
Malicious code in gus.js (npm)
- Aug 14, 2025
Malicious code in gurucoder (npm)
- Aug 14, 2025
Malicious code in guru-service-js-client (npm)
- Aug 14, 2025
Malicious code in guru-react-native-widgets (npm)
- Aug 14, 2025
Malicious code in guru-common-kotlin-js (npm)
- Aug 14, 2025
Malicious code in guqxzrkivseotpal (npm)
- Aug 14, 2025
Malicious code in gunnerbot (npm)
- Aug 14, 2025
Malicious code in guniver (npm)
- Aug 14, 2025
Malicious code in GumbaJS (npm)
- Aug 14, 2025
Malicious code in gulp-sitecore (npm)
- Aug 14, 2025
Malicious code in gulp-putalioss (npm)
- Aug 14, 2025
Malicious code in gulp-nts-uit-index-helper (npm)
- Aug 14, 2025
Malicious code in gulp-mocha-electron (npm)
- Aug 14, 2025
Malicious code in gulp-jspm-fix (npm)
- Aug 14, 2025
Malicious code in gulp-javascriptobfuscator-ficik (npm)
- Aug 14, 2025
Malicious code in gulp-ile-contents-to-keys (npm)
- Aug 14, 2025
Malicious code in gulp-helios-adonis-helmet (npm)
- Aug 14, 2025
Malicious code in gulp-es6-browserfy-boilerplate (npm)
- Aug 14, 2025
Malicious code in gulp-dslash (npm)
- Aug 14, 2025
Malicious code in gulp-data-mask (npm)
- Aug 14, 2025
Malicious code in gulp-css-colorseur (npm)
- Aug 14, 2025
Malicious code in gulp-coveralls2 (npm)
- Aug 14, 2025
Malicious code in gulp-angular-templatecache-ionic (npm)
- Aug 14, 2025
Malicious code in gulp-alivevn-os-del-files (npm)
- Aug 14, 2025
Malicious code in gulp-airbnb-child-process-pulsar (npm)
- Aug 14, 2025
Malicious code in guimain (npm)
- Aug 14, 2025
Malicious code in guildview (npm)
- Aug 14, 2025
Malicious code in guidamon (npm)
- Aug 14, 2025
Malicious code in guestia (npm)
- Aug 14, 2025
Malicious code in guestbook (npm)
- Aug 14, 2025
Malicious code in guessxy (npm)
- Aug 14, 2025
Malicious code in guess_the_number-732161 (npm)
- Aug 14, 2025
Malicious code in guess-zodiac (npm)
- Aug 14, 2025
Malicious code in guess-smartphone (npm)
- Aug 14, 2025
Malicious code in guess-pets (npm)
- Aug 14, 2025
Malicious code in guess-iq (npm)
- Aug 14, 2025
Malicious code in guess-ideology (npm)
- Aug 14, 2025
Malicious code in gtunes (npm)
- Aug 14, 2025
Malicious code in gtracer (npm)
- Aug 14, 2025
Malicious code in gtldlist (npm)
- Aug 14, 2025
Malicious code in gtjapp (npm)
- Aug 14, 2025
Malicious code in gtejmhrvkukqonps (npm)
- Aug 14, 2025
Malicious code in gt.ui.common (npm)
- Aug 14, 2025
Malicious code in gt.module.shipping-orders (npm)
Page 5550 of 6,634