Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malware in hhuen
1 compromised version
- Aug 19, 2022
Malware in gulpmiiycsns
1 compromised version
- Aug 19, 2022
Malware in infyl
1 compromised version
- Aug 19, 2022
Malware in gulpfllter
1 compromised version
- Aug 19, 2022
Malware in htmlwebpacplulin
1 compromised version
- Aug 19, 2022
Malware in graymatte5r
1 compromised version
- Aug 19, 2022
Malware in hjsbesutify
1 compromised version
- Aug 19, 2022
Malware in hfilesa3ver
1 compromised version
- Aug 19, 2022
Malware in husy
1 compromised version
- Aug 19, 2022
Malware in grgtgparse
1 compromised version
- Aug 19, 2022
Malware in h6mlentiies
1 compromised version
- Aug 19, 2022
Malware in gupnotify
1 compromised version
- Aug 19, 2022
Malware in guzpless
1 compromised version
- Aug 19, 2022
Malware in glpsass
1 compromised version
- Aug 19, 2022
Malware in gulptemplte
1 compromised version
- Aug 19, 2022
Malware in hirdeis
1 compromised version
- Aug 19, 2022
Malware in getectort
1 compromised version
- Aug 19, 2022
Malware in heflectmetadata
1 compromised version
- Aug 19, 2022
Malware in idejtityobjproxy
1 compromised version
- Aug 19, 2022
Malware in gulpuil
1 compromised version
- Aug 19, 2022
Malware in immutoabilityhelper
1 compromised version
- Aug 19, 2022
Malware in hogajnjs
1 compromised version
- Aug 19, 2022
Malware in hpathexists
1 compromised version
- Aug 19, 2022
Malware in hixletpaiprs
1 compromised version
- Aug 19, 2022
Malware in gruntconric4opy
1 compromised version
- Aug 19, 2022
Malware in guljshint
1 compromised version
- Aug 19, 2022
Malware in hashsu7m
1 compromised version
- Aug 19, 2022
Malware in httpproxyagnc
1 compromised version
- Aug 19, 2022
Malware in gulpimagemib
1 compromised version
- Aug 19, 2022
Malware in ierbase
1 compromised version
- Aug 19, 2022
Malware in httppoy
1 compromised version
- Aug 19, 2022
Malware in grtanhqltools
1 compromised version
- Aug 19, 2022
Malware in gq4tport
1 compromised version
- Aug 19, 2022
Malware in gulpreplae
1 compromised version
- Aug 19, 2022
Malware in glohbh
1 compromised version
- Aug 19, 2022
Malware in httpstatuscoxes
1 compromised version
- Aug 19, 2022
Malware in htmlpjader
1 compromised version
- Aug 19, 2022
Malware in invariqaot
1 compromised version
- Aug 19, 2022
Malware in gulpugliyk
1 compromised version
- Aug 19, 2022
Malware in gulpinstazall
1 compromised version
- Aug 19, 2022
Malware in htlparsevr2
1 compromised version
- Aug 19, 2022
Malware in genericsool
1 compromised version
- Aug 19, 2022
Malware in highlighjtjs
1 compromised version
- Aug 19, 2022
Malware in gulptypscript
1 compromised version
- Aug 19, 2022
Malware in httrperrors
1 compromised version
- Aug 19, 2022
Malware in gulpposgcss
1 compromised version
- Aug 19, 2022
Malware in ihghland
1 compromised version
- Aug 19, 2022
Malware in gulpplumkber
1 compromised version
- Aug 19, 2022
Malware in hlk
1 compromised version
- Aug 19, 2022
Malware in getstdn
1 compromised version
Page 6382 of 6,634