Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Jun 25, 2024
Malicious code in here-hd-watch-creed-3-full-movies-hd-online-at-home-free-4k (npm)
1 compromised version
- MAL-2024-2462Malwarenpmhere-full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homeJun 25, 2024
Malicious code in here-full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hellodependency1 (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in hellodependency01 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hellodependency001 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hello-demo-lib (npm)
1 compromised version
- Jun 25, 2024
Malicious code in heliotrope (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in hearsay-design-system (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in hdc-cuevana3-ant-man-and-the-wasp-quantumania-ver-cuevana-en-esphanol-latino (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hd-tu-jhoothi-main-makkar-on-full-movies-online-streaming (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hd-everything-everywhere-all-at-once-2022-online-on-fullmovies-free-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in havas-worldwide (npm)
1 compromised version
- Jun 25, 2024
Malicious code in harvest-strategy-arbitrum (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in hackity (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hackersnav (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hackerone2222 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hacker101 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hackboysoso (npm)
1 compromised version
- Jun 25, 2024
Malicious code in h_test1 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gulp2-sd-test (npm)
1 compromised version
- Jun 25, 2024
Malicious code in guardian-service (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gtm-js (npm)
1 compromised version
- Jun 25, 2024
Malicious code in grunt-frontend-packager (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gruf-demo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in grpc-web-devtoolssss (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gravityforms (npm)
1 compromised version
- Jun 25, 2024
Malicious code in graphql-optics (npm)
1 compromised version
- Jun 25, 2024
Malicious code in grammarly-desktop (npm)
1 compromised version
- Jun 25, 2024
Malicious code in graffiti-alley-spray-cans (npm)
1 compromised version
- Jun 25, 2024
Malicious code in grafana__slate-react (npm)
1 compromised version
- Jun 25, 2024
Malicious code in grablink-web-sdk (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in gp-constants (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gp-comps (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gp-colors (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gp-assets (npm)
1 compromised version
- Jun 25, 2024
Malicious code in googleindexthisplease (npm)
1 compromised version
- Jun 25, 2024
Malicious code in googlechecktcp12 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in google.fhir.stu3.google (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in google-build-slack (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in gltf-blender-io-tests (npm)
1 compromised version
- Jun 25, 2024
Malicious code in glob10 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in github-runner-lambda-syncer (npm)
1 compromised version
- Jun 25, 2024
Malicious code in github-artifact-exporter-core (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in gfg-cicd-scripts (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gew7-client-framework (npm)
1 compromised version
- Jun 25, 2024
Malicious code in getorcreateprecachecontroller (npm)
1 compromised version
- Jun 25, 2024
Malicious code in generate-protocol (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gdxgxvxdewt (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in gcommon-ui-mobile (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gcc-patch (npm)
2 compromised versions
Page 6190 of 6,646