Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in glacier-lilac-yay654-project (npm)
- Aug 14, 2025
Malicious code in glacier-lagoon-oco032-project (npm)
- Aug 14, 2025
Malicious code in glacier-lagoon-app009-project (npm)
- Aug 14, 2025
Malicious code in glacier-kite-ged465-project (npm)
- Aug 14, 2025
Malicious code in glacier-iceberg-ijp896-project (npm)
- Aug 14, 2025
Malicious code in glacier-horizon-ahd256-project (npm)
- Aug 14, 2025
Malicious code in glacier-honeycomb-yrc049-project (npm)
- Aug 14, 2025
Malicious code in glacier-coral-yun199-project (npm)
- Aug 14, 2025
Malicious code in glacier-cloud-yqk343-project (npm)
- Aug 14, 2025
Malicious code in glacier-cherry-ket500-project (npm)
- Aug 14, 2025
Malicious code in glacier-bonfire-mtj174-project (npm)
- Aug 14, 2025
Malicious code in glacier-akn1n-diogl-xenith-project (npm)
- Aug 14, 2025
Malicious code in gkzysqdhmoakwvpl (npm)
- Aug 14, 2025
Malicious code in gkyzohjukivxndrb (npm)
- Aug 14, 2025
Malicious code in gkufdxrvzehskmbq (npm)
- Aug 14, 2025
Malicious code in gkrzwfculhbvsqyx (npm)
- Aug 14, 2025
Malicious code in gkrtalpha (npm)
- Aug 14, 2025
Malicious code in gkqhjraptnskyxmv (npm)
- Aug 14, 2025
Malicious code in gkozvefrhxdqlkap (npm)
- Aug 14, 2025
Malicious code in gkmenwcaszhvotlf (npm)
- Aug 14, 2025
Malicious code in gkhptyjmckfdzaui (npm)
- Aug 14, 2025
Malicious code in gkfhztsmuxjbvkyw (npm)
- Aug 14, 2025
Malicious code in gka-01-bp-address-auto-complete-by-component (npm)
- Aug 14, 2025
Malicious code in gjs-development-scripts (npm)
- Aug 14, 2025
Malicious code in gizmocoin (npm)
- Aug 14, 2025
Malicious code in gixxcel (npm)
- Aug 14, 2025
Malicious code in givecrm (npm)
- Aug 14, 2025
Malicious code in give-advice-10th (npm)
- Aug 14, 2025
Malicious code in gittorial (npm)
- Aug 14, 2025
Malicious code in gitter-irc-bridge (npm)
- Aug 14, 2025
Malicious code in gitsskill (npm)
- Aug 14, 2025
Malicious code in gitshrub (npm)
- Aug 14, 2025
Malicious code in gitrepr (npm)
- Aug 14, 2025
Malicious code in gitology (npm)
- Aug 14, 2025
Malicious code in gitmodel (npm)
- Aug 14, 2025
Malicious code in gitkurs (npm)
- Aug 14, 2025
Malicious code in gitkoning (npm)
- Aug 14, 2025
Malicious code in githwqy (npm)
- Aug 14, 2025
Malicious code in githut-api-fbnew (npm)
- Aug 14, 2025
Malicious code in githubtes (npm)
- Aug 14, 2025
Malicious code in githubinfo (npm)
- Aug 14, 2025
Malicious code in github-react-components (npm)
- Aug 14, 2025
Malicious code in githsc (npm)
- Aug 14, 2025
Malicious code in githowto (npm)
- Aug 14, 2025
Malicious code in gitbub (npm)
- Aug 14, 2025
Malicious code in gitbook-plugin-datadotworld (npm)
- Aug 14, 2025
Malicious code in gitarise (npm)
- Aug 14, 2025
Malicious code in gitalien (npm)
- Aug 14, 2025
Malicious code in gitali (npm)
- Aug 14, 2025
Malicious code in gita-toge89-breki (npm)
Page 5561 of 6,634