Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malware in graprqltag
1 compromised version
- Aug 19, 2022
Malware in gulpcleancs
1 compromised version
- Aug 19, 2022
Malware in glppeslint
1 compromised version
- Aug 19, 2022
Malware in hoistnonjreactstatics
1 compromised version
- Aug 19, 2022
Malware in gruntcontriblean
1 compromised version
- Aug 19, 2022
Malicious code in geactnativevecoicons (npm)
- Aug 19, 2022
Malicious code in g8untcotribwatch (npm)
- Aug 19, 2022
Malicious code in g3lpbabel (npm)
- Aug 19, 2022
Malicious code in futf4 (npm)
- Aug 19, 2022
Malicious code in funiquerandobmaoray (npm)
- Aug 19, 2022
Malicious code in fuirebagseadmi (npm)
- Aug 19, 2022
Malicious code in fuesjo (npm)
- Aug 19, 2022
Malicious code in fteam (npm)
- Aug 19, 2022
Malicious code in frontzatter (npm)
- Aug 19, 2022
Malicious code in fqaekr (npm)
- Aug 19, 2022
Malicious code in forktscheckerwebpajwkplugi (npm)
- Aug 19, 2022
Malicious code in forktscheckerwebackplugiwnalt (npm)
- Aug 19, 2022
Malicious code in foptaweome (npm)
- Aug 19, 2022
Malicious code in followredirect3 (npm)
- Aug 19, 2022
Malicious code in folior (npm)
- Aug 19, 2022
Malicious code in foermdata (npm)
- Aug 19, 2022
Malicious code in fluetffmpeg (npm)
- Aug 19, 2022
Malicious code in fjle4ize (npm)
- Aug 19, 2022
Malicious code in finuj (npm)
- Aug 19, 2022
Malicious code in findupsnc (npm)
- Aug 19, 2022
Malicious code in finauhaoler (npm)
- Aug 19, 2022
Malicious code in filtetypg (npm)
- Aug 19, 2022
Malicious code in fieloader (npm)
- Aug 19, 2022
Malicious code in fidurel (npm)
- Aug 19, 2022
Malicious code in feslintpquginbakel (npm)
- Aug 19, 2022
Malicious code in feiendlyerrorswebpackplugin (npm)
- Aug 19, 2022
Malicious code in fastg0b (npm)
- Aug 19, 2022
Malicious code in fanc6og (npm)
- Aug 19, 2022
Malicious code in falidatenpmpackagename (npm)
- Aug 19, 2022
Malicious code in eziparser (npm)
- Aug 19, 2022
Malicious code in extratazip (npm)
- Aug 19, 2022
Malicious code in extracttextwrebpackplugin (npm)
- Aug 19, 2022
Malicious code in extned (npm)
- Aug 19, 2022
Malicious code in extendshall4w (npm)
- Aug 19, 2022
Malicious code in exsess (npm)
- Aug 19, 2022
Malicious code in expressyession (npm)
- Aug 19, 2022
Malicious code in ex6error (npm)
- Aug 19, 2022
Malicious code in evelu (npm)
- Aug 19, 2022
Malicious code in euirejs (npm)
- Aug 19, 2022
Malicious code in ethereumjstox (npm)
- Aug 19, 2022
Malicious code in ethereumjstil (npm)
- Aug 19, 2022
Malicious code in etg (npm)
- Aug 19, 2022
Malicious code in estwatchtypaehead (npm)
- Aug 19, 2022
Malicious code in espapehtlm (npm)
- Aug 19, 2022
Malicious code in eslintpwuginjest (npm)
Page 6383 of 6,634