Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in guess-ideology (npm)
- Aug 14, 2025
Malicious code in gtunes (npm)
- Aug 14, 2025
Malicious code in gtracer (npm)
- Aug 14, 2025
Malicious code in gtldlist (npm)
- Aug 14, 2025
Malicious code in gtjapp (npm)
- Aug 14, 2025
Malicious code in gtejmhrvkukqonps (npm)
- Aug 14, 2025
Malicious code in gt.ui.common (npm)
- Aug 14, 2025
Malicious code in gt.module.shipping-orders (npm)
- Aug 14, 2025
Malicious code in gt.framework (npm)
- Aug 14, 2025
Malicious code in gswbdkazmynvexrq (npm)
- Aug 14, 2025
Malicious code in gstrtpfec (npm)
- Aug 14, 2025
Malicious code in gstream-consumer (npm)
- Aug 14, 2025
Malicious code in gstmain (npm)
- Aug 14, 2025
Malicious code in gsteal (npm)
- Aug 14, 2025
Malicious code in gsmanager (npm)
- Aug 14, 2025
Malicious code in gskowron2 (npm)
- Aug 14, 2025
Malicious code in gsg (npm)
- Aug 14, 2025
Malicious code in gsfrt4 (npm)
- Aug 14, 2025
Malicious code in gsf.document-list (npm)
- Aug 14, 2025
Malicious code in gsf.certificate-list (npm)
- Aug 14, 2025
Malicious code in gsf.billing-summary (npm)
- Aug 14, 2025
Malicious code in gsd-common (npm)
- Aug 14, 2025
Malicious code in grzwxodcbpynuhta (npm)
- Aug 14, 2025
Malicious code in gryfter (npm)
- Aug 14, 2025
Malicious code in grutils (npm)
- Aug 14, 2025
Malicious code in grus-css-loader-javascript-elektra (npm)
- Aug 14, 2025
Malicious code in grus-asthenosphere-uglify-js-corvus (npm)
- Aug 14, 2025
Malicious code in grunt-zeptojs (npm)
- Aug 14, 2025
Malicious code in grunt-vox-svg-prepper (npm)
- Aug 14, 2025
Malicious code in grunt-vox-asset-bundle-parser (npm)
- Aug 14, 2025
Malicious code in grunt-vagrant-ssh (npm)
- Aug 14, 2025
Malicious code in grunt-stream-pavo-version (npm)
- Aug 14, 2025
Malicious code in grunt-spinner-janus-tool (npm)
- Aug 14, 2025
Malicious code in grunt-smart-download (npm)
- Aug 14, 2025
Malicious code in grunt-schema-chalk-nodejs (npm)
- Aug 14, 2025
Malicious code in grunt-nwabap-ui5uploader2 (npm)
- Aug 14, 2025
Malicious code in grunt-mdx-upgrade-rollup (npm)
- Aug 14, 2025
Malicious code in grunt-html2requirejs (npm)
- Aug 14, 2025
Malicious code in grunt-alphard-ionosphere-nebula (npm)
- Aug 14, 2025
Malicious code in grubhero (npm)
- Aug 14, 2025
Malicious code in growunit (npm)
- Aug 14, 2025
Malicious code in growtower (npm)
- Aug 14, 2025
Malicious code in growthbook-cli (npm)
- Aug 14, 2025
Malicious code in growling (npm)
- Aug 14, 2025
Malicious code in grovie (npm)
- Aug 14, 2025
Malicious code in grove_ju8yd_82rgx_ocean (npm)
- Aug 14, 2025
Malicious code in grove_icuqw_b7g43_yew (npm)
- Aug 14, 2025
Malicious code in grove_cpiqf_td252_jasmine (npm)
- Aug 14, 2025
Malicious code in grove_a1hs3_dm8nr_kaleidoscope (npm)
- Aug 14, 2025
Malicious code in grove_7ox32_tewvq_bloom (npm)
Page 6012 of 7,324