Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in gazebo-ugli-3a62 (npm)
- Aug 14, 2025
Malicious code in gazebo-titan-7iae (npm)
- Aug 14, 2025
Malicious code in gazebo-nutmeg-77ha (npm)
- Aug 14, 2025
Malicious code in gazebo-fir-nhbd (npm)
- Aug 14, 2025
Malicious code in gazebo-falcon-qm3s (npm)
- Aug 14, 2025
Malicious code in gazebo-drone-eajr (npm)
- Aug 14, 2025
Malicious code in gaze-tenderly-cnk505-project (npm)
- Aug 14, 2025
Malicious code in gauss-react-rest (npm)
- Aug 14, 2025
Malicious code in gaurun (npm)
- Aug 14, 2025
Malicious code in gaugesjs (npm)
- Aug 14, 2025
Malicious code in gatsbyimageserver (npm)
- Aug 14, 2025
Malicious code in gatsby-theme-bulmaio (npm)
- Aug 14, 2025
Malicious code in gatsby-superflare-asteroid-bionics (npm)
- Aug 14, 2025
Malicious code in gatsby-source-wordpress-bcgdv (npm)
- Aug 14, 2025
Malicious code in gatsby-source-fauna-id (npm)
- Aug 14, 2025
Malicious code in gatsby-plugin-easy-i18n (npm)
- Aug 14, 2025
Malicious code in gatsby-enif-remark-castor (npm)
- Aug 14, 2025
Malicious code in gatsby-enif-polaris-passport (npm)
- Aug 14, 2025
Malicious code in gatsby-delphinus-command-publish (npm)
- Aug 14, 2025
Malicious code in gatojr (npm)
- Aug 14, 2025
Malicious code in gateway-ui (npm)
- Aug 14, 2025
Malicious code in gateway-query-parser (npm)
- Aug 14, 2025
Malicious code in gatestats (npm)
- Aug 14, 2025
Malicious code in gate-context-client (npm)
- Aug 14, 2025
Malicious code in gatcang (npm)
- Aug 14, 2025
Malicious code in gasview (npm)
- Aug 14, 2025
Malicious code in gasmap (npm)
- Aug 14, 2025
Malicious code in gasbag (npm)
- Aug 14, 2025
Malicious code in gartcl (npm)
- Aug 14, 2025
Malicious code in garretts (npm)
- Aug 14, 2025
Malicious code in garage11-lib (npm)
- Aug 14, 2025
Malicious code in ganymede-sync-materialize-jabbah (npm)
- Aug 14, 2025
Malicious code in ganymede-kastra-antd-javascript (npm)
- Aug 14, 2025
Malicious code in ganymede-fornax-juno-husky (npm)
- Aug 14, 2025
Malicious code in ganymede-cache-capella-testcafe (npm)
- Aug 14, 2025
Malicious code in ganymede-blaze-eclipse-arcturus (npm)
- Aug 14, 2025
Malicious code in ganymede-babel-ethology-auth (npm)
- Aug 14, 2025
Malicious code in ganrepo (npm)
- Aug 14, 2025
Malicious code in ganescha-template (npm)
- Aug 14, 2025
Malicious code in gammarayburst-yonder-loopback-nightwatch (npm)
- Aug 14, 2025
Malicious code in gammarayburst-rigel-biomimicry-quantum-computing (npm)
- Aug 14, 2025
Malicious code in gammarayburst-local-nova-graviton (npm)
- Aug 14, 2025
Malicious code in gamma-throw-report-deserialize-uglify (npm)
- Aug 14, 2025
Malicious code in gamma-rho-protected-balance-load (npm)
- Aug 14, 2025
Malicious code in gamma-good-good-process-rain (npm)
- Aug 14, 2025
Malicious code in gamine (npm)
- Aug 14, 2025
Malicious code in gameworks (npm)
- Aug 14, 2025
Malicious code in gametrax (npm)
- Aug 14, 2025
Malicious code in gamestore (npm)
- Aug 14, 2025
Malicious code in gamestab (npm)
Page 5567 of 6,634