Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in graphman (npm)
- Aug 14, 2025
Malicious code in graphkit (npm)
- Aug 14, 2025
Malicious code in graphiql-rails-fork (npm)
- Aug 14, 2025
Malicious code in graphicv (npm)
- Aug 14, 2025
Malicious code in graphic (npm)
- Aug 14, 2025
Malicious code in graphedia (npm)
- Aug 14, 2025
Malicious code in graphchat (npm)
- Aug 14, 2025
Malicious code in grapesjs-from-doc (npm)
- Aug 14, 2025
Malicious code in grape-zucchini-fqlz (npm)
- Aug 14, 2025
Malicious code in grape-y8y-project (npm)
- Aug 14, 2025
Malicious code in grape-xzw-project (npm)
- Aug 14, 2025
Malicious code in grape-xylophone-02qz (npm)
- Aug 14, 2025
Malicious code in grape-xigua-lemon-nxoem (npm)
- Aug 14, 2025
Malicious code in grape-xigua-kwxn (npm)
- Aug 14, 2025
Malicious code in grape-x9p-project (npm)
- Aug 14, 2025
Malicious code in grape-wls-project (npm)
- Aug 14, 2025
Malicious code in grape-whiskey-jfin (npm)
- Aug 14, 2025
Malicious code in grape-whiskey-bvjt (npm)
- Aug 14, 2025
Malicious code in grape-vinegar-31lr (npm)
- Aug 14, 2025
Malicious code in grape-victor-xczd (npm)
- Aug 14, 2025
Malicious code in grape-victor-pvwe (npm)
- Aug 14, 2025
Malicious code in grape-vanilla-rfvl (npm)
- Aug 14, 2025
Malicious code in grape-vanilla-b8fo (npm)
- Aug 14, 2025
Malicious code in grape-tyg-project (npm)
- Aug 14, 2025
Malicious code in grape-tim-project (npm)
- Aug 14, 2025
Malicious code in grape-tango-mfsy (npm)
- Aug 14, 2025
Malicious code in grape-tangerine-lima-szfmm (npm)
- Aug 14, 2025
Malicious code in grape-tangerine-kilo-qtkct (npm)
- Aug 14, 2025
Malicious code in grape-sd5-project (npm)
- Aug 14, 2025
Malicious code in grape-romeo-lima-twimq (npm)
- Aug 14, 2025
Malicious code in grape-quebec-papaya-sewvg (npm)
- Aug 14, 2025
Malicious code in grape-quebec-noku (npm)
- Aug 14, 2025
Malicious code in grape-qik-project (npm)
- Aug 14, 2025
Malicious code in grape-pkb-project (npm)
- Aug 14, 2025
Malicious code in grape-papaya-ukjf (npm)
- Aug 14, 2025
Malicious code in grape-papa-whiskey-tvukr (npm)
- Aug 14, 2025
Malicious code in grape-p6i-project (npm)
- Aug 14, 2025
Malicious code in grape-oscar-ikpt (npm)
- Aug 14, 2025
Malicious code in grape-orange-srxq (npm)
- Aug 14, 2025
Malicious code in grape-omd-project (npm)
- Aug 14, 2025
Malicious code in grape-n27-project (npm)
- Aug 14, 2025
Malicious code in grape-mzk-project (npm)
- Aug 14, 2025
Malicious code in grape-moat-8zxd (npm)
- Aug 14, 2025
Malicious code in grape-lighthouse-8yb7 (npm)
- Aug 14, 2025
Malicious code in grape-lemon-alpha-xeiqm (npm)
- Aug 14, 2025
Malicious code in grape-kilo-opuc (npm)
- Aug 14, 2025
Malicious code in grape-hotel-juliet-mgihg (npm)
- Aug 14, 2025
Malicious code in grape-hotel-jcwr (npm)
- Aug 14, 2025
Malicious code in grape-hotel-ebpv (npm)
- Aug 14, 2025
Malicious code in grape-honeydew-xeio (npm)
Page 6015 of 7,324