Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in golf-ox4-project (npm)
- Aug 14, 2025
Malicious code in golf-orange-rwvt (npm)
- Aug 14, 2025
Malicious code in golf-oeg-project (npm)
- Aug 14, 2025
Malicious code in golf-ned-project (npm)
- Aug 14, 2025
Malicious code in golf-m4h-project (npm)
- Aug 14, 2025
Malicious code in golf-lemon-ysfm (npm)
- Aug 14, 2025
Malicious code in golf-kiwi-moqq (npm)
- Aug 14, 2025
Malicious code in golf-ivy-nbab (npm)
- Aug 14, 2025
Malicious code in golf-india-yejq (npm)
- Aug 14, 2025
Malicious code in golf-india-quince-gbrub (npm)
- Aug 14, 2025
Malicious code in golf-india-nkho (npm)
- Aug 14, 2025
Malicious code in golf-hotel-donw (npm)
- Aug 14, 2025
Malicious code in golf-hcm-project (npm)
- Aug 14, 2025
Malicious code in golf-grape-vcoi (npm)
- Aug 14, 2025
Malicious code in golf-fir-diti (npm)
- Aug 14, 2025
Malicious code in golf-fig-wpqt (npm)
- Aug 14, 2025
Malicious code in golf-fig-vvje (npm)
- Aug 14, 2025
Malicious code in golf-fig-romeo-oafkm (npm)
- Aug 14, 2025
Malicious code in golf-ferry-kfvr (npm)
- Aug 14, 2025
Malicious code in golf-elderberry-cvty (npm)
- Aug 14, 2025
Malicious code in golf-echo-okfe (npm)
- Aug 14, 2025
Malicious code in golf-ebx-project (npm)
- Aug 14, 2025
Malicious code in golf-cherry-ygem (npm)
- Aug 14, 2025
Malicious code in golf-cherry-iabh (npm)
- Aug 14, 2025
Malicious code in golf-cherry-fhno (npm)
- Aug 14, 2025
Malicious code in golf-charlie-susu (npm)
- Aug 14, 2025
Malicious code in golf-charlie-fldx (npm)
- Aug 14, 2025
Malicious code in golf-carrot-ufbe (npm)
- Aug 14, 2025
Malicious code in golf-61r-project (npm)
- Aug 14, 2025
Malicious code in golf-5vv-project (npm)
- Aug 14, 2025
Malicious code in golf-5km-project (npm)
- Aug 14, 2025
Malicious code in golf-466-project (npm)
- Aug 14, 2025
Malicious code in golf-1d8-project (npm)
- Aug 14, 2025
Malicious code in golf-030-project (npm)
- Aug 14, 2025
Malicious code in goldpoint-cac-module (npm)
- Aug 14, 2025
Malicious code in goldeneye (npm)
- Aug 14, 2025
Malicious code in golangtw (npm)
- Aug 14, 2025
Malicious code in gojs2 (npm)
- Aug 14, 2025
Malicious code in gojs-designer (npm)
- Aug 14, 2025
Malicious code in gojs-artisan (npm)
- Aug 14, 2025
Malicious code in gojek-tv (npm)
- Aug 14, 2025
Malicious code in gohelix (npm)
- Aug 14, 2025
Malicious code in goforums (npm)
- Aug 14, 2025
Malicious code in gofinity (npm)
- Aug 14, 2025
Malicious code in godswar (npm)
- Aug 14, 2025
Malicious code in godenv (npm)
- Aug 14, 2025
Malicious code in godana (npm)
- Aug 14, 2025
Malicious code in gocodego (npm)
- Aug 14, 2025
Malicious code in gocast (npm)
- Aug 14, 2025
Malicious code in gobotplus (npm)
Page 5558 of 6,634