Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in gettick-node (npm)
- Aug 14, 2025
Malicious code in getpaid (npm)
- Aug 14, 2025
Malicious code in getissues (npm)
- Aug 14, 2025
Malicious code in getissue (npm)
- Aug 14, 2025
Malicious code in gethostinfo (npm)
- Aug 14, 2025
Malicious code in getcookies (npm)
- Aug 14, 2025
Malicious code in getamped (npm)
- Aug 14, 2025
Malicious code in get-stats-from-planning-file (npm)
- Aug 14, 2025
Malicious code in get-start-synpress (npm)
- Aug 14, 2025
Malicious code in get-asphalt-9-legends-credits-generator (npm)
- Aug 14, 2025
Malicious code in get-ark-survival-ancient-amber-generator (npm)
- Aug 14, 2025
Malicious code in gestor-creditos (npm)
- Aug 14, 2025
Malicious code in gestaouab (npm)
- Aug 14, 2025
Malicious code in gestalt-borders (npm)
- Aug 14, 2025
Malicious code in gestalt-avatar (npm)
- Aug 14, 2025
Malicious code in gestalt-accessibility-token (npm)
- Aug 14, 2025
Malicious code in gercon (npm)
- Aug 14, 2025
Malicious code in georgios (npm)
- Aug 14, 2025
Malicious code in georef (npm)
- Aug 14, 2025
Malicious code in geoposty (npm)
- Aug 14, 2025
Malicious code in geoport-i18n (npm)
- Aug 14, 2025
Malicious code in geomorphology-petrology-pm2-antd (npm)
- Aug 14, 2025
Malicious code in geomorphology-leda-subscription-magellan (npm)
- Aug 14, 2025
Malicious code in geomnet (npm)
- Aug 14, 2025
Malicious code in geomip (npm)
- Aug 14, 2025
Malicious code in geomatics (npm)
- Aug 14, 2025
Malicious code in geojackal (npm)
- Aug 14, 2025
Malicious code in geoflux (npm)
- Aug 14, 2025
Malicious code in geofake (npm)
- Aug 14, 2025
Malicious code in geoevent (npm)
- Aug 14, 2025
Malicious code in geodynamo-standard-meteor-string (npm)
- Aug 14, 2025
Malicious code in geodynamo-inflation-superflare-spinner (npm)
- Aug 14, 2025
Malicious code in geodynamo-geochemistry-brane-antares (npm)
- Aug 14, 2025
Malicious code in geodatix (npm)
- Aug 14, 2025
Malicious code in geochronology-polaris-elektra-sociobiology (npm)
- Aug 14, 2025
Malicious code in geochronology-markdown-jupiter-dotenv-parse-variables (npm)
- Aug 14, 2025
Malicious code in geochronology-luminescence-electron-builder-supernova (npm)
- Aug 14, 2025
Malicious code in geochemistry-shelljs-terser-webpack-plugin-koa (npm)
- Aug 14, 2025
Malicious code in geochemistry-seismology-higgs-karma (npm)
- Aug 14, 2025
Malicious code in geochemistry-panspermia-uglify-js-pulsar (npm)
- Aug 14, 2025
Malicious code in geobase6 (npm)
- Aug 14, 2025
Malicious code in geoarchaeology-vulcan-celeste-style-loader (npm)
- Aug 14, 2025
Malicious code in geoarchaeology-taurus-async-writable (npm)
- Aug 14, 2025
Malicious code in geoarchaeology-run-script-parcel-local (npm)
- Aug 14, 2025
Malicious code in geoarchaeology-deneb-local-supernova (npm)
- Aug 14, 2025
Malicious code in genyjs (npm)
- Aug 14, 2025
Malicious code in genpkg (npm)
- Aug 14, 2025
Malicious code in genomics-testcafe-proxima-xanthus (npm)
- Aug 14, 2025
Malicious code in genomics-tectonophysics-vulcan-fornax (npm)
- Aug 14, 2025
Malicious code in genomics-quito-mesosphere-ganymede (npm)
Page 5564 of 6,634