Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in h1-cli-ext-root-openapi-generator (npm)
- Aug 14, 2025
Malicious code in h1-cli-ext-root-auth (npm)
- Aug 14, 2025
Malicious code in h1-cli-ext-iam-project-select (npm)
- Aug 14, 2025
Malicious code in h1-cli-device-node (npm)
- Aug 14, 2025
Malicious code in h1-cli-device-browser (npm)
- Aug 14, 2025
Malicious code in h1-cli-core (npm)
- Aug 14, 2025
Malicious code in gzkgame (npm)
- Aug 14, 2025
Malicious code in gyptjwbcknamkfqr (npm)
- Aug 14, 2025
Malicious code in gymarb (npm)
- Aug 14, 2025
Malicious code in gym-http-api (npm)
- Aug 14, 2025
Malicious code in gyf-api-game-username (npm)
- Aug 14, 2025
Malicious code in gwodot (npm)
- Aug 14, 2025
Malicious code in gvdesign (npm)
- Aug 14, 2025
Malicious code in gvargas (npm)
- Aug 14, 2025
Malicious code in gus.js (npm)
- Aug 14, 2025
Malicious code in gurucoder (npm)
- Aug 14, 2025
Malicious code in guru-service-js-client (npm)
- Aug 14, 2025
Malicious code in guru-react-native-widgets (npm)
- Aug 14, 2025
Malicious code in guru-common-kotlin-js (npm)
- Aug 14, 2025
Malicious code in guqxzrkivseotpal (npm)
- Aug 14, 2025
Malicious code in gunnerbot (npm)
- Aug 14, 2025
Malicious code in guniver (npm)
- Aug 14, 2025
Malicious code in GumbaJS (npm)
- Aug 14, 2025
Malicious code in gulp-sitecore (npm)
- Aug 14, 2025
Malicious code in gulp-putalioss (npm)
- Aug 14, 2025
Malicious code in gulp-nts-uit-index-helper (npm)
- Aug 14, 2025
Malicious code in gulp-mocha-electron (npm)
- Aug 14, 2025
Malicious code in gulp-jspm-fix (npm)
- Aug 14, 2025
Malicious code in gulp-javascriptobfuscator-ficik (npm)
- Aug 14, 2025
Malicious code in gulp-ile-contents-to-keys (npm)
- Aug 14, 2025
Malicious code in gulp-helios-adonis-helmet (npm)
- Aug 14, 2025
Malicious code in gulp-es6-browserfy-boilerplate (npm)
- Aug 14, 2025
Malicious code in gulp-dslash (npm)
- Aug 14, 2025
Malicious code in gulp-data-mask (npm)
- Aug 14, 2025
Malicious code in gulp-css-colorseur (npm)
- Aug 14, 2025
Malicious code in gulp-coveralls2 (npm)
- Aug 14, 2025
Malicious code in gulp-angular-templatecache-ionic (npm)
- Aug 14, 2025
Malicious code in gulp-alivevn-os-del-files (npm)
- Aug 14, 2025
Malicious code in gulp-airbnb-child-process-pulsar (npm)
- Aug 14, 2025
Malicious code in guimain (npm)
- Aug 14, 2025
Malicious code in guildview (npm)
- Aug 14, 2025
Malicious code in guidamon (npm)
- Aug 14, 2025
Malicious code in guestia (npm)
- Aug 14, 2025
Malicious code in guestbook (npm)
- Aug 14, 2025
Malicious code in guessxy (npm)
- Aug 14, 2025
Malicious code in guess_the_number-732161 (npm)
- Aug 14, 2025
Malicious code in guess-zodiac (npm)
- Aug 14, 2025
Malicious code in guess-smartphone (npm)
- Aug 14, 2025
Malicious code in guess-pets (npm)
- Aug 14, 2025
Malicious code in guess-iq (npm)
Page 6011 of 7,324