Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in glacier-yellow-pof386-project (npm)
- Aug 14, 2025
Malicious code in glacier-yellow-opu263-project (npm)
- Aug 14, 2025
Malicious code in glacier-x6uw0-u15n3-quartz-project (npm)
- Aug 14, 2025
Malicious code in glacier-waterfall-ckb568-project (npm)
- Aug 14, 2025
Malicious code in glacier-spruce-lcp491-project (npm)
- Aug 14, 2025
Malicious code in glacier-quail-yyi309-project (npm)
- Aug 14, 2025
Malicious code in glacier-piano-wgz803-project (npm)
- Aug 14, 2025
Malicious code in glacier-opal-kgh733-project (npm)
- Aug 14, 2025
Malicious code in glacier-lilac-yay654-project (npm)
- Aug 14, 2025
Malicious code in glacier-lagoon-oco032-project (npm)
- Aug 14, 2025
Malicious code in glacier-lagoon-app009-project (npm)
- Aug 14, 2025
Malicious code in glacier-kite-ged465-project (npm)
- Aug 14, 2025
Malicious code in glacier-iceberg-ijp896-project (npm)
- Aug 14, 2025
Malicious code in glacier-horizon-ahd256-project (npm)
- Aug 14, 2025
Malicious code in glacier-honeycomb-yrc049-project (npm)
- Aug 14, 2025
Malicious code in glacier-coral-yun199-project (npm)
- Aug 14, 2025
Malicious code in glacier-cloud-yqk343-project (npm)
- Aug 14, 2025
Malicious code in glacier-cherry-ket500-project (npm)
- Aug 14, 2025
Malicious code in glacier-bonfire-mtj174-project (npm)
- Aug 14, 2025
Malicious code in glacier-akn1n-diogl-xenith-project (npm)
- Aug 14, 2025
Malicious code in gkzysqdhmoakwvpl (npm)
- Aug 14, 2025
Malicious code in gkyzohjukivxndrb (npm)
- Aug 14, 2025
Malicious code in gkufdxrvzehskmbq (npm)
- Aug 14, 2025
Malicious code in gkrzwfculhbvsqyx (npm)
- Aug 14, 2025
Malicious code in gkrtalpha (npm)
- Aug 14, 2025
Malicious code in gkqhjraptnskyxmv (npm)
- Aug 14, 2025
Malicious code in gkozvefrhxdqlkap (npm)
- Aug 14, 2025
Malicious code in gkmenwcaszhvotlf (npm)
- Aug 14, 2025
Malicious code in gkhptyjmckfdzaui (npm)
- Aug 14, 2025
Malicious code in gkfhztsmuxjbvkyw (npm)
- Aug 14, 2025
Malicious code in gka-01-bp-address-auto-complete-by-component (npm)
- Aug 14, 2025
Malicious code in gjs-development-scripts (npm)
- Aug 14, 2025
Malicious code in gizmocoin (npm)
- Aug 14, 2025
Malicious code in gixxcel (npm)
- Aug 14, 2025
Malicious code in givecrm (npm)
- Aug 14, 2025
Malicious code in give-advice-10th (npm)
- Aug 14, 2025
Malicious code in gittorial (npm)
- Aug 14, 2025
Malicious code in gitter-irc-bridge (npm)
- Aug 14, 2025
Malicious code in gitsskill (npm)
- Aug 14, 2025
Malicious code in gitshrub (npm)
- Aug 14, 2025
Malicious code in gitrepr (npm)
- Aug 14, 2025
Malicious code in gitology (npm)
- Aug 14, 2025
Malicious code in gitmodel (npm)
- Aug 14, 2025
Malicious code in gitkurs (npm)
- Aug 14, 2025
Malicious code in gitkoning (npm)
- Aug 14, 2025
Malicious code in githwqy (npm)
- Aug 14, 2025
Malicious code in githut-api-fbnew (npm)
- Aug 14, 2025
Malicious code in githubtes (npm)
- Aug 14, 2025
Malicious code in githubinfo (npm)
- Aug 14, 2025
Malicious code in github-react-components (npm)
Page 6022 of 7,324