Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in goforums (npm)
- Aug 14, 2025
Malicious code in gofinity (npm)
- Aug 14, 2025
Malicious code in godswar (npm)
- Aug 14, 2025
Malicious code in godenv (npm)
- Aug 14, 2025
Malicious code in godana (npm)
- Aug 14, 2025
Malicious code in gocodego (npm)
- Aug 14, 2025
Malicious code in gocast (npm)
- Aug 14, 2025
Malicious code in gobotplus (npm)
- Aug 14, 2025
Malicious code in gobblers (npm)
- Aug 14, 2025
Malicious code in goantifraud-reborn (npm)
- Aug 14, 2025
Malicious code in goantifraud (npm)
- Aug 14, 2025
Malicious code in goagent (npm)
- Aug 14, 2025
Malicious code in go-notify (npm)
- Aug 14, 2025
Malicious code in go-api-starter (npm)
- Aug 14, 2025
Malicious code in gnoptix (npm)
- Aug 14, 2025
Malicious code in gnadelite (npm)
- Aug 14, 2025
Malicious code in gmykzvuloidfjkwq (npm)
- Aug 14, 2025
Malicious code in gmxlib (npm)
- Aug 14, 2025
Malicious code in gmx-synthetics (npm)
- Aug 14, 2025
Malicious code in gmx-subgraph (npm)
- Aug 14, 2025
Malicious code in gmx-share (npm)
- Aug 14, 2025
Malicious code in gmmongoanonymizer (npm)
- Aug 14, 2025
Malicious code in gmbcliepjkzonhkv (npm)
- Aug 14, 2025
Malicious code in gmailtask (npm)
- Aug 14, 2025
Malicious code in gluedb (npm)
- Aug 14, 2025
Malicious code in glpenguin (npm)
- Aug 14, 2025
Malicious code in glow_uxxmn_nhsk3_zenith (npm)
- Aug 14, 2025
Malicious code in glow_sux6h_gv5lg_tempest (npm)
- Aug 14, 2025
Malicious code in glow_b7flw_rcx7y_keystone (npm)
- Aug 14, 2025
Malicious code in glow_957h7_gbtid_drizzle (npm)
- Aug 14, 2025
Malicious code in glow-zfvhq-3vj5l-jade-project (npm)
- Aug 14, 2025
Malicious code in glow-y1z1a-yv7rc-jungle-project (npm)
- Aug 14, 2025
Malicious code in glow-wds16-y23uq-alchemy-project (npm)
- Aug 14, 2025
Malicious code in glow-v3nsf-o1w38-yellow-project (npm)
- Aug 14, 2025
Malicious code in glow-p3wmn-2cmta-bison-project (npm)
- Aug 14, 2025
Malicious code in glow-os232-pbc9r-yellow-project (npm)
- Aug 14, 2025
Malicious code in glow-m7ob1-tgmj0-raven-project (npm)
- Aug 14, 2025
Malicious code in glow-ijsn3-xlrpg-nymph-project (npm)
- Aug 14, 2025
Malicious code in glow-folgj-r4nz8-emerald-project (npm)
- Aug 14, 2025
Malicious code in glow-fkhrk-kwhgl-bison-project (npm)
- Aug 14, 2025
Malicious code in glow-earvq-vrre5-quiver-project (npm)
- Aug 14, 2025
Malicious code in glow-d8x1i-z5vb3-vista-project (npm)
- Aug 14, 2025
Malicious code in glow-8rs4t-ryjre-nymph-project (npm)
- Aug 14, 2025
Malicious code in glow-1xrcr-ju80e-yellow-project (npm)
- Aug 14, 2025
Malicious code in glossa (npm)
- Aug 14, 2025
Malicious code in gloparser (npm)
- Aug 14, 2025
Malicious code in globonews (npm)
- Aug 14, 2025
Malicious code in globedemo (npm)
- Aug 14, 2025
Malicious code in globalid (npm)
- Aug 14, 2025
Malicious code in global-rest-gacrux-test (npm)
Page 6020 of 7,324