Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in githsc (npm)
- Aug 14, 2025
Malicious code in githowto (npm)
- Aug 14, 2025
Malicious code in gitbub (npm)
- Aug 14, 2025
Malicious code in gitbook-plugin-datadotworld (npm)
- Aug 14, 2025
Malicious code in gitarise (npm)
- Aug 14, 2025
Malicious code in gitalien (npm)
- Aug 14, 2025
Malicious code in gitali (npm)
- Aug 14, 2025
Malicious code in gita-toge89-breki (npm)
- Aug 14, 2025
Malicious code in gita-tempe7-kuki (npm)
- Aug 14, 2025
Malicious code in gita-telur59-kuki (npm)
- Aug 14, 2025
Malicious code in gita-teh70-breki (npm)
- Aug 14, 2025
Malicious code in gita-ronde60-sukiwir (npm)
- Aug 14, 2025
Malicious code in gita-rendang7-breki (npm)
- Aug 14, 2025
Malicious code in gita-lupis61-sukiwir (npm)
- Aug 14, 2025
Malicious code in gita-lapis87-breki (npm)
- Aug 14, 2025
Malicious code in gita-kupat27-breki (npm)
- Aug 14, 2025
Malicious code in gita-kue62-breki (npm)
- Aug 14, 2025
Malicious code in gita-kolak77-breki (npm)
- Aug 14, 2025
Malicious code in gita-ketoprak40-breki (npm)
- Aug 14, 2025
Malicious code in gita-gepuk15-breki (npm)
- Aug 14, 2025
Malicious code in gita-gado-gado28-breki (npm)
- Aug 14, 2025
Malicious code in gita-bika38-breki (npm)
- Aug 14, 2025
Malicious code in gita-bakwan72-breki (npm)
- Aug 14, 2025
Malicious code in git-ps (npm)
- Aug 14, 2025
Malicious code in git-pl (npm)
- Aug 14, 2025
Malicious code in git-ocr (npm)
- Aug 14, 2025
Malicious code in git-mirror-client (npm)
- Aug 14, 2025
Malicious code in git-lg (npm)
- Aug 14, 2025
Malicious code in git-cliff-win32-x64 (npm)
- Aug 14, 2025
Malicious code in git-cliff-win32-arm64 (npm)
- Aug 14, 2025
Malicious code in gistpad (npm)
- Aug 14, 2025
Malicious code in girltalk (npm)
- Aug 14, 2025
Malicious code in GirlJS (npm)
- Aug 14, 2025
Malicious code in girard (npm)
- Aug 14, 2025
Malicious code in giraffe_s6y6n_ygi84_sanctuary (npm)
- Aug 14, 2025
Malicious code in giraffe_of6tw_9ljzv_aspen (npm)
- Aug 14, 2025
Malicious code in giraffe_ngqb2_fhbb1_quiver (npm)
- Aug 14, 2025
Malicious code in giraffe_n23uq_lyuko_vortex (npm)
- Aug 14, 2025
Malicious code in giraffe_lnz7u_5pb8q_dew (npm)
- Aug 14, 2025
Malicious code in giraffe_cff0d_c0r1s_iris (npm)
- Aug 14, 2025
Malicious code in giraffe_45hrm_dfcsz_xylophone (npm)
- Aug 14, 2025
Malicious code in giraffe-yucca-lsc635-project (npm)
- Aug 14, 2025
Malicious code in giraffe-reports (npm)
- Aug 14, 2025
Malicious code in giraffe-oak-iao978-project (npm)
- Aug 14, 2025
Malicious code in giraffe-nymph-chj096-project (npm)
- Aug 14, 2025
Malicious code in giraffe-lagoon-nwe755-project (npm)
- Aug 14, 2025
Malicious code in giraffe-jade-cnx074-project (npm)
- Aug 14, 2025
Malicious code in giraffe-glade-ppc442-project (npm)
- Aug 14, 2025
Malicious code in giraffe-fox-qok168-project (npm)
- Aug 14, 2025
Malicious code in giraffe-fern-xeb201-project (npm)
Page 6023 of 7,324