Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in generator-bbc-vj (npm)
- Aug 14, 2025
Malicious code in generator-banner-dny (npm)
- Aug 14, 2025
Malicious code in generator-angular-cli-library (npm)
- Aug 14, 2025
Malicious code in generator-accelerate-redux (npm)
- Aug 14, 2025
Malicious code in generator-accelerate-react-native (npm)
- Aug 14, 2025
Malicious code in generator-accelerate-react (npm)
- Aug 14, 2025
Malicious code in generator-accelerate-node-microservice (npm)
- Aug 14, 2025
Malicious code in generator-accelerate-node-api (npm)
- Aug 14, 2025
Malicious code in generator-accelerate-mongodb (npm)
- Aug 14, 2025
Malicious code in generator-accelerate-mern (npm)
- Aug 14, 2025
Malicious code in generator-accelerate-data-transform (npm)
- Aug 14, 2025
Malicious code in generator-accelerate-couchdb (npm)
- Aug 14, 2025
Malicious code in genehive (npm)
- Aug 14, 2025
Malicious code in gempak (npm)
- Aug 14, 2025
Malicious code in gemjacker (npm)
- Aug 14, 2025
Malicious code in gemini-resolvers-superagent-backend (npm)
- Aug 14, 2025
Malicious code in gemini-install-server-radioastronomy (npm)
- Aug 14, 2025
Malicious code in gemini-andromeda-geckodriver-prompts (npm)
- Aug 14, 2025
Malicious code in gem-client (npm)
- Aug 14, 2025
Malicious code in gelato-framework (npm)
- Aug 14, 2025
Malicious code in geepurin (npm)
- Aug 14, 2025
Malicious code in geekonn (npm)
- Aug 14, 2025
Malicious code in geekml (npm)
- Aug 14, 2025
Malicious code in geekbar (npm)
- Aug 14, 2025
Malicious code in geckodriver-seismology-capella-lightyear (npm)
- Aug 14, 2025
Malicious code in geckodriver-pipe-quasar-css-loader (npm)
- Aug 14, 2025
Malicious code in geckodriver-link-vortex-spinner (npm)
- Aug 14, 2025
Malicious code in geckodriver-install-install-radioastronomy (npm)
- Aug 14, 2025
Malicious code in gebxyswpvhijfntq (npm)
- Aug 14, 2025
Malicious code in gdwvytlercmzufqo (npm)
- Aug 14, 2025
Malicious code in gduqokxtpivwzlmf (npm)
- Aug 14, 2025
Malicious code in gdskrvpylwhquxfo (npm)
- Aug 14, 2025
Malicious code in gdruveakthycolij (npm)
- Aug 14, 2025
Malicious code in gdocopt (npm)
- Aug 14, 2025
Malicious code in gdftre43 (npm)
- Aug 14, 2025
Malicious code in gdfgtr44 (npm)
- Aug 14, 2025
Malicious code in gdf3 (npm)
- Aug 14, 2025
Malicious code in gctrack (npm)
- Aug 14, 2025
Malicious code in gcswnrfvkaqijxku (npm)
- Aug 14, 2025
Malicious code in gcsearch (npm)
- Aug 14, 2025
Malicious code in gcplive (npm)
- Aug 14, 2025
Malicious code in gcmhelper (npm)
- Aug 14, 2025
Malicious code in gces-dataset (npm)
- Aug 14, 2025
Malicious code in gccwrap (npm)
- Aug 14, 2025
Malicious code in gboxghost (npm)
- Aug 14, 2025
Malicious code in gbncleyvqwdrzkxf (npm)
- Aug 14, 2025
Malicious code in gbldksyqhnozcxpr (npm)
- Aug 14, 2025
Malicious code in gbenergy (npm)
- Aug 14, 2025
Malicious code in gazros (npm)
- Aug 14, 2025
Malicious code in gazebo-ziggurat-bgrn (npm)
Page 5566 of 6,634