Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in gulpuil (npm)
- Aug 19, 2022
Malicious code in gulpugliyk (npm)
- Aug 19, 2022
Malicious code in gulptypscript (npm)
- Aug 19, 2022
Malicious code in gulptemplte (npm)
- Aug 19, 2022
Malicious code in gulpsourcemuaps (npm)
- Aug 19, 2022
Malicious code in gulpreplae (npm)
- Aug 19, 2022
Malicious code in gulpposgcss (npm)
- Aug 19, 2022
Malicious code in gulpplumkber (npm)
- Aug 19, 2022
Malicious code in gulpmiiycsns (npm)
- Aug 19, 2022
Malicious code in gulplosdplucgins (npm)
- Aug 19, 2022
Malicious code in gulpinstazall (npm)
- Aug 19, 2022
Malicious code in gulpimagemib (npm)
- Aug 19, 2022
Malicious code in gulpfllter (npm)
- Aug 19, 2022
Malicious code in gulpcleancs (npm)
- Aug 19, 2022
Malicious code in guljshint (npm)
- Aug 19, 2022
Malicious code in gugpmshell (npm)
- Aug 19, 2022
Malicious code in gugpconilict (npm)
- Aug 19, 2022
Malicious code in gruntcontriblean (npm)
- Aug 19, 2022
Malicious code in gruntcontribjsint (npm)
- Aug 19, 2022
Malicious code in gruntconric4opy (npm)
- Aug 19, 2022
Malicious code in grtanhqltools (npm)
- Aug 19, 2022
Malicious code in grgtgparse (npm)
- Aug 19, 2022
Malicious code in graymatte5r (npm)
- Aug 19, 2022
Malicious code in graprqltag (npm)
- Aug 19, 2022
Malicious code in gq4tport (npm)
- Aug 19, 2022
Malicious code in googleaips (npm)
- Aug 19, 2022
Malicious code in glpsass (npm)
- Aug 19, 2022
Malicious code in glppeslint (npm)
- Aug 19, 2022
Malicious code in glohbh (npm)
- Aug 19, 2022
Malicious code in getstdn (npm)
- Aug 19, 2022
Malicious code in getectort (npm)
- Aug 19, 2022
Malicious code in genericsool (npm)
- Aug 19, 2022
Malicious code in garcefulfs (npm)
- Aug 19, 2022
Malware in imagemu8
1 compromised version
- Aug 19, 2022
Malware in httpsrver
1 compromised version
- Aug 19, 2022
Malware in htmlminifire
1 compromised version
- Aug 19, 2022
Malware in garcefulfs
1 compromised version
- Aug 19, 2022
Malware in hintstaged
1 compromised version
- Aug 19, 2022
Malware in googleaips
1 compromised version
- Aug 19, 2022
Malware in ioderits
1 compromised version
- Aug 19, 2022
Malware in gzpixizu
1 compromised version
- Aug 19, 2022
Malware in hutpproxymiddleware
1 compromised version
- Aug 19, 2022
Malware in gruntcontribjsint
1 compromised version
- Aug 19, 2022
Malware in inxi
1 compromised version
- Aug 19, 2022
Malware in gugpconilict
1 compromised version
- Aug 19, 2022
Malware in gulplosdplucgins
1 compromised version
- Aug 19, 2022
Malware in gugpmshell
1 compromised version
- Aug 19, 2022
Malware in gulpsourcemuaps
1 compromised version
- Aug 19, 2022
Malware in hapollocaheinmemory
1 compromised version
- Aug 19, 2022
Malware in gurbpautroprefixer
1 compromised version
Page 6381 of 6,634