Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in grove_6ii0a_be99b_tundra (npm)
- Aug 14, 2025
Malicious code in grove_1cieh_0ae8a_crown (npm)
- Aug 14, 2025
Malicious code in grove-zymwh-heuk3-xylophone-project (npm)
- Aug 14, 2025
Malicious code in grove-zodiac-jgi174-project (npm)
- Aug 14, 2025
Malicious code in grove-zeppelin-npw743-project (npm)
- Aug 14, 2025
Malicious code in grove-z7hek-zg9rl-wisp-project (npm)
- Aug 14, 2025
Malicious code in grove-vf653-z6vg0-yonder-project (npm)
- Aug 14, 2025
Malicious code in grove-uogxw-q0lv4-iceberg-project (npm)
- Aug 14, 2025
Malicious code in grove-unicorn-yiu798-project (npm)
- Aug 14, 2025
Malicious code in grove-sunset-pkg228-project (npm)
- Aug 14, 2025
Malicious code in grove-star-pij476-project (npm)
- Aug 14, 2025
Malicious code in grove-rainbow-tzs205-project (npm)
- Aug 14, 2025
Malicious code in grove-quasar-keb769-project (npm)
- Aug 14, 2025
Malicious code in grove-qsk5k-e3xsm-pinnacle-project (npm)
- Aug 14, 2025
Malicious code in grove-qq77w-xavbc-coral-project (npm)
- Aug 14, 2025
Malicious code in grove-o6s45-ig67e-thunder-project (npm)
- Aug 14, 2025
Malicious code in grove-labyrinth-bns772-project (npm)
- Aug 14, 2025
Malicious code in grove-ky3yz-x9ge8-indigo-project (npm)
- Aug 14, 2025
Malicious code in grove-jellyfish-dsy041-project (npm)
- Aug 14, 2025
Malicious code in grove-hill-ica923-project (npm)
- Aug 14, 2025
Malicious code in grove-hill-anq301-project (npm)
- Aug 14, 2025
Malicious code in grove-hiim3-2wce6-drift-project (npm)
- Aug 14, 2025
Malicious code in grove-gorge-kav018-project (npm)
- Aug 14, 2025
Malicious code in grove-fuk89-p24zm-birch-project (npm)
- Aug 14, 2025
Malicious code in grove-emerald-ggf347-project (npm)
- Aug 14, 2025
Malicious code in grove-e0w0k-o6e8h-knoll-project (npm)
- Aug 14, 2025
Malicious code in grove-dove-hjg826-project (npm)
- Aug 14, 2025
Malicious code in grove-czy3n-0pipo-yeti-project (npm)
- Aug 14, 2025
Malicious code in grove-blossom-fes057-project (npm)
- Aug 14, 2025
Malicious code in grove-63gol-93zth-silk-project (npm)
- Aug 14, 2025
Malicious code in grove-2yjlo-1a6ph-wisp-project (npm)
- Aug 14, 2025
Malicious code in grove-1tzhe-m74x3-ash-project (npm)
- Aug 14, 2025
Malicious code in grove-1ma73-t0gy9-crescent-project (npm)
- Aug 14, 2025
Malicious code in grove-0ynpt-5kta6-breeze-project (npm)
- Aug 14, 2025
Malicious code in groupseq (npm)
- Aug 14, 2025
Malicious code in groupon-social (npm)
- Aug 14, 2025
Malicious code in groupmessagejs (npm)
- Aug 14, 2025
Malicious code in groupfs (npm)
- Aug 14, 2025
Malicious code in groupe00001_henritran-nguyen_tp3 (npm)
- Aug 14, 2025
Malicious code in grosvenor (npm)
- Aug 14, 2025
Malicious code in groq-appgen (npm)
- Aug 14, 2025
Malicious code in groovyxsd (npm)
- Aug 14, 2025
Malicious code in groots-cli (npm)
- Aug 14, 2025
Malicious code in groopy (npm)
- Aug 14, 2025
Malicious code in groceboom (npm)
- Aug 14, 2025
Malicious code in grmakers (npm)
- Aug 14, 2025
Malicious code in griffin-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in griffin-paypal (npm)
- Aug 14, 2025
Malicious code in griffin-content-react (npm)
- Aug 14, 2025
Malicious code in griffin-content-client (npm)
Page 6013 of 7,324