Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in grievance (npm)
- Aug 14, 2025
Malicious code in griefjs (npm)
- Aug 14, 2025
Malicious code in gridstrap_ (npm)
- Aug 14, 2025
Malicious code in gridsome-tailwindcss-public-neuromorphic (npm)
- Aug 14, 2025
Malicious code in gridsome-orogeny-prettier-plugin-markdown-asteroid (npm)
- Aug 14, 2025
Malicious code in gridsome-mysql-avior-callback (npm)
- Aug 14, 2025
Malicious code in gridproxy (npm)
- Aug 14, 2025
Malicious code in gridninja (npm)
- Aug 14, 2025
Malicious code in gridmoja (npm)
- Aug 14, 2025
Malicious code in grid-public-link-route-rain (npm)
- Aug 14, 2025
Malicious code in grid-iota-assert-cache-omega (npm)
- Aug 14, 2025
Malicious code in greppperz (npm)
- Aug 14, 2025
Malicious code in grep-module-dog-iota-short (npm)
- Aug 14, 2025
Malicious code in grep-emulate-cold-virtualize-file (npm)
- Aug 14, 2025
Malicious code in gregarius (npm)
- Aug 14, 2025
Malicious code in greentube-nrgs (npm)
- Aug 14, 2025
Malicious code in greenpages-client (npm)
- Aug 14, 2025
Malicious code in greedkata (npm)
- Aug 14, 2025
Malicious code in greatfilter-resolvers-query-greatfilter (npm)
- Aug 14, 2025
Malicious code in greatfilter-ablation-phoenix-shelljs (npm)
- Aug 14, 2025
Malicious code in greater-giving-admin (npm)
- Aug 14, 2025
Malicious code in grdmkfyaojsbwenl (npm)
- Aug 14, 2025
Malicious code in grdeflect (npm)
- Aug 14, 2025
Malicious code in graywulf (npm)
- Aug 14, 2025
Malicious code in gravyboat (npm)
- Aug 14, 2025
Malicious code in gravity-yildun-holography-chai (npm)
- Aug 14, 2025
Malicious code in gravity-sqlite-got-nuxtjs (npm)
- Aug 14, 2025
Malicious code in gravity-quasar-helios-betelgeuse (npm)
- Aug 14, 2025
Malicious code in graviton-semantic-ui-eigenstate-photon (npm)
- Aug 14, 2025
Malicious code in graviton-outercore-loglevel-quark (npm)
- Aug 14, 2025
Malicious code in graviton-dactyl-helmet-dotenv-parse-variables (npm)
- Aug 14, 2025
Malicious code in graviton-brane-castor-dependencies (npm)
- Aug 14, 2025
Malicious code in gravitlauncher-ws-api (npm)
- Aug 14, 2025
Malicious code in gravitationalwave-wormhole-publish-reveal-md (npm)
- Aug 14, 2025
Malicious code in gravitationalwave-phoebe-less-loader-decoherence (npm)
- Aug 14, 2025
Malicious code in gravitationalwave-parsec-decoherence-fornax (npm)
- Aug 14, 2025
Malicious code in gravitationalwave-node-config-equinox-commitlint (npm)
- Aug 14, 2025
Malicious code in gravitationalwave-geodynamo-nightwatch-upgrade (npm)
- Aug 14, 2025
Malicious code in grassql (npm)
- Aug 14, 2025
Malicious code in grasql (npm)
- Aug 14, 2025
Malicious code in graphquil (npm)
- Aug 14, 2025
Malicious code in graphql_swift_gen (npm)
- Aug 14, 2025
Malicious code in graphql_java_gen (npm)
- Aug 14, 2025
Malicious code in graphql-shorthand-parser2 (npm)
- Aug 14, 2025
Malicious code in graphql-neptune-reveal-md-leda (npm)
- Aug 14, 2025
Malicious code in graphql-jest-cypress-build (npm)
- Aug 14, 2025
Malicious code in graphql-comet-mantle-got (npm)
- Aug 14, 2025
Malicious code in graphql-callback-loglevel-standard (npm)
- Aug 14, 2025
Malicious code in graphql-bellatrix-transport-blueshift (npm)
- Aug 14, 2025
Malicious code in graphnetworkx (npm)
6 compromised versions
Page 6014 of 7,324