Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in gt.framework (npm)
- Aug 14, 2025
Malicious code in gswbdkazmynvexrq (npm)
- Aug 14, 2025
Malicious code in gstrtpfec (npm)
- Aug 14, 2025
Malicious code in gstream-consumer (npm)
- Aug 14, 2025
Malicious code in gstmain (npm)
- Aug 14, 2025
Malicious code in gsteal (npm)
- Aug 14, 2025
Malicious code in gsmanager (npm)
- Aug 14, 2025
Malicious code in gskowron2 (npm)
- Aug 14, 2025
Malicious code in gsg (npm)
- Aug 14, 2025
Malicious code in gsfrt4 (npm)
- Aug 14, 2025
Malicious code in gsf.document-list (npm)
- Aug 14, 2025
Malicious code in gsf.certificate-list (npm)
- Aug 14, 2025
Malicious code in gsf.billing-summary (npm)
- Aug 14, 2025
Malicious code in gsd-common (npm)
- Aug 14, 2025
Malicious code in grzwxodcbpynuhta (npm)
- Aug 14, 2025
Malicious code in gryfter (npm)
- Aug 14, 2025
Malicious code in grutils (npm)
- Aug 14, 2025
Malicious code in grus-css-loader-javascript-elektra (npm)
- Aug 14, 2025
Malicious code in grus-asthenosphere-uglify-js-corvus (npm)
- Aug 14, 2025
Malicious code in grunt-zeptojs (npm)
- Aug 14, 2025
Malicious code in grunt-vox-svg-prepper (npm)
- Aug 14, 2025
Malicious code in grunt-vox-asset-bundle-parser (npm)
- Aug 14, 2025
Malicious code in grunt-vagrant-ssh (npm)
- Aug 14, 2025
Malicious code in grunt-stream-pavo-version (npm)
- Aug 14, 2025
Malicious code in grunt-spinner-janus-tool (npm)
- Aug 14, 2025
Malicious code in grunt-smart-download (npm)
- Aug 14, 2025
Malicious code in grunt-schema-chalk-nodejs (npm)
- Aug 14, 2025
Malicious code in grunt-nwabap-ui5uploader2 (npm)
- Aug 14, 2025
Malicious code in grunt-mdx-upgrade-rollup (npm)
- Aug 14, 2025
Malicious code in grunt-html2requirejs (npm)
- Aug 14, 2025
Malicious code in grunt-alphard-ionosphere-nebula (npm)
- Aug 14, 2025
Malicious code in grubhero (npm)
- Aug 14, 2025
Malicious code in growunit (npm)
- Aug 14, 2025
Malicious code in growtower (npm)
- Aug 14, 2025
Malicious code in growthbook-cli (npm)
- Aug 14, 2025
Malicious code in growling (npm)
- Aug 14, 2025
Malicious code in grovie (npm)
- Aug 14, 2025
Malicious code in grove_ju8yd_82rgx_ocean (npm)
- Aug 14, 2025
Malicious code in grove_icuqw_b7g43_yew (npm)
- Aug 14, 2025
Malicious code in grove_cpiqf_td252_jasmine (npm)
- Aug 14, 2025
Malicious code in grove_a1hs3_dm8nr_kaleidoscope (npm)
- Aug 14, 2025
Malicious code in grove_7ox32_tewvq_bloom (npm)
- Aug 14, 2025
Malicious code in grove_6ii0a_be99b_tundra (npm)
- Aug 14, 2025
Malicious code in grove_1cieh_0ae8a_crown (npm)
- Aug 14, 2025
Malicious code in grove-zymwh-heuk3-xylophone-project (npm)
- Aug 14, 2025
Malicious code in grove-zodiac-jgi174-project (npm)
- Aug 14, 2025
Malicious code in grove-zeppelin-npw743-project (npm)
- Aug 14, 2025
Malicious code in grove-z7hek-zg9rl-wisp-project (npm)
- Aug 14, 2025
Malicious code in grove-vf653-z6vg0-yonder-project (npm)
- Aug 14, 2025
Malicious code in grove-uogxw-q0lv4-iceberg-project (npm)
Page 5551 of 6,634