Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in giraffe-cloud-pkt622-project (npm)
- Aug 14, 2025
Malicious code in giraffe-cloud-cvd846-project (npm)
- Aug 14, 2025
Malicious code in giraffe-cliff-soi316-project (npm)
- Aug 14, 2025
Malicious code in giraffe-cliff-gbh685-project (npm)
- Aug 14, 2025
Malicious code in giovanna (npm)
- Aug 14, 2025
Malicious code in ginkgo-xerophyte-mqol (npm)
- Aug 14, 2025
Malicious code in ginkgo-volcano-agyo (npm)
- Aug 14, 2025
Malicious code in ginkgo-raspberry-ky0c (npm)
- Aug 14, 2025
Malicious code in ginkgo-golf-5ho5 (npm)
- Aug 14, 2025
Malicious code in ginkgo-elephant-h1pp (npm)
- Aug 14, 2025
Malicious code in ginger-viaduct-jse0 (npm)
- Aug 14, 2025
Malicious code in ginger-temple-c4k3 (npm)
- Aug 14, 2025
Malicious code in ginger-kangaroo-de3b (npm)
- Aug 14, 2025
Malicious code in ginger-heliosphere-s5g1 (npm)
- Aug 14, 2025
Malicious code in ginger-ferry-cbxl (npm)
- Aug 14, 2025
Malicious code in gimp (npm)
- Aug 14, 2025
Malicious code in gilang-tahu1-sukiwir (npm)
- Aug 14, 2025
Malicious code in gilang-sate31-kuki (npm)
- Aug 14, 2025
Malicious code in gilang-rendang13-sukiwir (npm)
- Aug 14, 2025
Malicious code in gilang-mieayam19-breki (npm)
- Aug 14, 2025
Malicious code in gilang-kupang94-breki (npm)
- Aug 14, 2025
Malicious code in gifhorse-cli (npm)
- Aug 14, 2025
Malicious code in gifhorse (npm)
- Aug 14, 2025
Malicious code in gifgen (npm)
- Aug 14, 2025
Malicious code in giasxhktpkbcymvd (npm)
- Aug 14, 2025
Malicious code in gianello (npm)
- Aug 14, 2025
Malicious code in ghzliwcfupdbyexk (npm)
- Aug 14, 2025
Malicious code in ghuloum (npm)
- Aug 14, 2025
Malicious code in ghostlulz-dependency (npm)
- Aug 14, 2025
Malicious code in ghostdrop (npm)
- Aug 14, 2025
Malicious code in ghcudlmhk15dmriqil4k8rxzd5axu9ri (npm)
- Aug 14, 2025
Malicious code in ggpserver (npm)
- Aug 14, 2025
Malicious code in ggjvic (npm)
- Aug 14, 2025
Malicious code in ggc3ekbfsuhscfrw5jdmzi087ftjv2ip (npm)
- Aug 14, 2025
Malicious code in gfyrt34 (npm)
- Aug 14, 2025
Malicious code in gfxapi (npm)
- Aug 14, 2025
Malicious code in gfwealth-nightswatch (npm)
- Aug 14, 2025
Malicious code in gfsni-backend (npm)
- Aug 14, 2025
Malicious code in gfrr4 (npm)
- Aug 14, 2025
Malicious code in gformjs (npm)
- Aug 14, 2025
Malicious code in gfk-bba-backend (npm)
- Aug 14, 2025
Malicious code in gfh56 (npm)
- Aug 14, 2025
Malicious code in gfg24 (npm)
- Aug 14, 2025
Malicious code in gfdg4t4 (npm)
- Aug 14, 2025
Malicious code in gfd444 (npm)
- Aug 14, 2025
Malicious code in gf43 (npm)
- Aug 14, 2025
Malicious code in gf-ionic2 (npm)
- Aug 14, 2025
Malicious code in gezi-core (npm)
- Aug 14, 2025
Malicious code in gezi (npm)
- Aug 14, 2025
Malicious code in geyser_zo3iy_9nrnt_mist (npm)
Page 6024 of 7,324