Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in http4s-proxy-aget (npm)
- Aug 19, 2022
Malicious code in http-proxy-iddlemare (npm)
- Aug 19, 2022
Malicious code in hthb-entites (npm)
- Aug 19, 2022
Malicious code in honsoliodate (npm)
- Aug 19, 2022
Malicious code in highligjt.sj (npm)
- Aug 19, 2022
Malicious code in hhland (npm)
- Aug 19, 2022
Malicious code in hbausic-vuth (npm)
- Aug 19, 2022
Malicious code in handleqazs (npm)
- Aug 19, 2022
Malicious code in gxqobal (npm)
- Aug 19, 2022
Malicious code in guplip-util (npm)
- Aug 19, 2022
Malicious code in gup-conca (npm)
- Aug 19, 2022
Malicious code in gulpyostcss (npm)
- Aug 19, 2022
Malicious code in gulpclan-css (npm)
- Aug 19, 2022
Malicious code in gulp-lpoada-plugins (npm)
- Aug 19, 2022
Malicious code in gulp-filste5 (npm)
- Aug 19, 2022
Malicious code in gulp-elsint (npm)
- Aug 19, 2022
Malicious code in gulp-cowlict (npm)
- Aug 19, 2022
Malicious code in gulp--topreftixer (npm)
- Aug 19, 2022
Malicious code in guljp-notifhy (npm)
- Aug 19, 2022
Malicious code in gular (npm)
- Aug 19, 2022
Malicious code in gtarc-fs (npm)
- Aug 19, 2022
Malicious code in grunt-contrib5-cop (npm)
- Aug 19, 2022
Malicious code in grunt-contrib-ugliyf (npm)
- Aug 19, 2022
Malicious code in grnt-co3trib-watch (npm)
- Aug 19, 2022
Malicious code in grayq-mater (npm)
- Aug 19, 2022
Malicious code in grappq2 (npm)
- Aug 19, 2022
Malicious code in gogl7eapiqs (npm)
- Aug 19, 2022
Malicious code in glp-minbfycss (npm)
- Aug 19, 2022
Malicious code in get-ior (npm)
- Aug 19, 2022
Malicious code in genericnool (npm)
- Aug 19, 2022
Malicious code in gcojb (npm)
- Aug 19, 2022
Malicious code in gaedlne (npm)
- Aug 19, 2022
Malicious code in fri9d-up (npm)
- Aug 19, 2022
Malicious code in formidblue (npm)
- Aug 19, 2022
Malicious code in fork-ts-checker-webpack-lugin-alt (npm)
- Aug 19, 2022
Malicious code in font-awesomwu (npm)
- Aug 19, 2022
Malicious code in follow-rdeirects (npm)
- Aug 19, 2022
Malware in hbausic-vuth
1 compromised version
- Aug 19, 2022
Malware in gxqobal
1 compromised version
- Aug 19, 2022
Malware in imaqge-sie
1 compromised version
- Aug 19, 2022
Malware in follow-rdeirects
1 compromised version
- Aug 19, 2022
Malware in guplip-util
1 compromised version
- Aug 19, 2022
Malware in gulpyostcss
1 compromised version
- Aug 19, 2022
Malware in gaedlne
1 compromised version
- Aug 19, 2022
Malware in hhland
1 compromised version
- Aug 19, 2022
Malware in grnt-co3trib-watch
1 compromised version
- Aug 19, 2022
Malware in gulp-filste5
1 compromised version
- Aug 19, 2022
Malware in glp-minbfycss
1 compromised version
- Aug 19, 2022
Malware in guljp-notifhy
1 compromised version
- Aug 19, 2022
Malware in gulp-cowlict
1 compromised version
Page 6367 of 6,634