Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in grove-unicorn-yiu798-project (npm)
- Aug 14, 2025
Malicious code in grove-sunset-pkg228-project (npm)
- Aug 14, 2025
Malicious code in grove-star-pij476-project (npm)
- Aug 14, 2025
Malicious code in grove-rainbow-tzs205-project (npm)
- Aug 14, 2025
Malicious code in grove-quasar-keb769-project (npm)
- Aug 14, 2025
Malicious code in grove-qsk5k-e3xsm-pinnacle-project (npm)
- Aug 14, 2025
Malicious code in grove-qq77w-xavbc-coral-project (npm)
- Aug 14, 2025
Malicious code in grove-o6s45-ig67e-thunder-project (npm)
- Aug 14, 2025
Malicious code in grove-labyrinth-bns772-project (npm)
- Aug 14, 2025
Malicious code in grove-ky3yz-x9ge8-indigo-project (npm)
- Aug 14, 2025
Malicious code in grove-jellyfish-dsy041-project (npm)
- Aug 14, 2025
Malicious code in grove-hill-ica923-project (npm)
- Aug 14, 2025
Malicious code in grove-hill-anq301-project (npm)
- Aug 14, 2025
Malicious code in grove-hiim3-2wce6-drift-project (npm)
- Aug 14, 2025
Malicious code in grove-gorge-kav018-project (npm)
- Aug 14, 2025
Malicious code in grove-fuk89-p24zm-birch-project (npm)
- Aug 14, 2025
Malicious code in grove-emerald-ggf347-project (npm)
- Aug 14, 2025
Malicious code in grove-e0w0k-o6e8h-knoll-project (npm)
- Aug 14, 2025
Malicious code in grove-dove-hjg826-project (npm)
- Aug 14, 2025
Malicious code in grove-czy3n-0pipo-yeti-project (npm)
- Aug 14, 2025
Malicious code in grove-blossom-fes057-project (npm)
- Aug 14, 2025
Malicious code in grove-63gol-93zth-silk-project (npm)
- Aug 14, 2025
Malicious code in grove-2yjlo-1a6ph-wisp-project (npm)
- Aug 14, 2025
Malicious code in grove-1tzhe-m74x3-ash-project (npm)
- Aug 14, 2025
Malicious code in grove-1ma73-t0gy9-crescent-project (npm)
- Aug 14, 2025
Malicious code in grove-0ynpt-5kta6-breeze-project (npm)
- Aug 14, 2025
Malicious code in groupseq (npm)
- Aug 14, 2025
Malicious code in groupon-social (npm)
- Aug 14, 2025
Malicious code in groupmessagejs (npm)
- Aug 14, 2025
Malicious code in groupfs (npm)
- Aug 14, 2025
Malicious code in groupe00001_henritran-nguyen_tp3 (npm)
- Aug 14, 2025
Malicious code in grosvenor (npm)
- Aug 14, 2025
Malicious code in groq-appgen (npm)
- Aug 14, 2025
Malicious code in groovyxsd (npm)
- Aug 14, 2025
Malicious code in groots-cli (npm)
- Aug 14, 2025
Malicious code in groopy (npm)
- Aug 14, 2025
Malicious code in groceboom (npm)
- Aug 14, 2025
Malicious code in grmakers (npm)
- Aug 14, 2025
Malicious code in griffin-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in griffin-paypal (npm)
- Aug 14, 2025
Malicious code in griffin-content-react (npm)
- Aug 14, 2025
Malicious code in griffin-content-client (npm)
- Aug 14, 2025
Malicious code in grievance (npm)
- Aug 14, 2025
Malicious code in griefjs (npm)
- Aug 14, 2025
Malicious code in gridstrap_ (npm)
- Aug 14, 2025
Malicious code in gridsome-tailwindcss-public-neuromorphic (npm)
- Aug 14, 2025
Malicious code in gridsome-orogeny-prettier-plugin-markdown-asteroid (npm)
- Aug 14, 2025
Malicious code in gridsome-mysql-avior-callback (npm)
- Aug 14, 2025
Malicious code in gridproxy (npm)
- Aug 14, 2025
Malicious code in gridninja (npm)
Page 5552 of 6,634