Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ginkgo-golf-5ho5 (npm)
- Aug 14, 2025
Malicious code in ginkgo-elephant-h1pp (npm)
- Aug 14, 2025
Malicious code in ginger-viaduct-jse0 (npm)
- Aug 14, 2025
Malicious code in ginger-temple-c4k3 (npm)
- Aug 14, 2025
Malicious code in ginger-kangaroo-de3b (npm)
- Aug 14, 2025
Malicious code in ginger-heliosphere-s5g1 (npm)
- Aug 14, 2025
Malicious code in ginger-ferry-cbxl (npm)
- Aug 14, 2025
Malicious code in gimp (npm)
- Aug 14, 2025
Malicious code in gilang-tahu1-sukiwir (npm)
- Aug 14, 2025
Malicious code in gilang-sate31-kuki (npm)
- Aug 14, 2025
Malicious code in gilang-rendang13-sukiwir (npm)
- Aug 14, 2025
Malicious code in gilang-mieayam19-breki (npm)
- Aug 14, 2025
Malicious code in gilang-kupang94-breki (npm)
- Aug 14, 2025
Malicious code in gifhorse-cli (npm)
- Aug 14, 2025
Malicious code in gifhorse (npm)
- Aug 14, 2025
Malicious code in gifgen (npm)
- Aug 14, 2025
Malicious code in giasxhktpkbcymvd (npm)
- Aug 14, 2025
Malicious code in gianello (npm)
- Aug 14, 2025
Malicious code in ghzliwcfupdbyexk (npm)
- Aug 14, 2025
Malicious code in ghuloum (npm)
- Aug 14, 2025
Malicious code in ghostlulz-dependency (npm)
- Aug 14, 2025
Malicious code in ghostdrop (npm)
- Aug 14, 2025
Malicious code in ghcudlmhk15dmriqil4k8rxzd5axu9ri (npm)
- Aug 14, 2025
Malicious code in ggpserver (npm)
- Aug 14, 2025
Malicious code in ggjvic (npm)
- Aug 14, 2025
Malicious code in ggc3ekbfsuhscfrw5jdmzi087ftjv2ip (npm)
- Aug 14, 2025
Malicious code in gfyrt34 (npm)
- Aug 14, 2025
Malicious code in gfxapi (npm)
- Aug 14, 2025
Malicious code in gfwealth-nightswatch (npm)
- Aug 14, 2025
Malicious code in gfsni-backend (npm)
- Aug 14, 2025
Malicious code in gfrr4 (npm)
- Aug 14, 2025
Malicious code in gformjs (npm)
- Aug 14, 2025
Malicious code in gfk-bba-backend (npm)
- Aug 14, 2025
Malicious code in gfh56 (npm)
- Aug 14, 2025
Malicious code in gfg24 (npm)
- Aug 14, 2025
Malicious code in gfdg4t4 (npm)
- Aug 14, 2025
Malicious code in gfd444 (npm)
- Aug 14, 2025
Malicious code in gf43 (npm)
- Aug 14, 2025
Malicious code in gf-ionic2 (npm)
- Aug 14, 2025
Malicious code in gezi-core (npm)
- Aug 14, 2025
Malicious code in gezi (npm)
- Aug 14, 2025
Malicious code in geyser_zo3iy_9nrnt_mist (npm)
- Aug 14, 2025
Malicious code in geyser_yvbq0_ja8z7_xenon (npm)
- Aug 14, 2025
Malicious code in geyser_yrbcu_ipnwd_karma (npm)
- Aug 14, 2025
Malicious code in geyser_oo9bt_fpus2_echo (npm)
- Aug 14, 2025
Malicious code in geyser_oj26s_rqwsb_breeze (npm)
- Aug 14, 2025
Malicious code in geyser_jjian_mxak4_wander (npm)
- Aug 14, 2025
Malicious code in geyser_c34yi_5hbiw_obsidian (npm)
- Aug 14, 2025
Malicious code in geyser_3d9l4_scsig_island (npm)
- Aug 14, 2025
Malicious code in gevpro (npm)
Page 5563 of 6,634