Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Aug 14, 2025
Malicious code in geyser_yvbq0_ja8z7_xenon (npm)
- Aug 14, 2025
Malicious code in geyser_yrbcu_ipnwd_karma (npm)
- Aug 14, 2025
Malicious code in geyser_oo9bt_fpus2_echo (npm)
- Aug 14, 2025
Malicious code in geyser_oj26s_rqwsb_breeze (npm)
- Aug 14, 2025
Malicious code in geyser_jjian_mxak4_wander (npm)
- Aug 14, 2025
Malicious code in geyser_c34yi_5hbiw_obsidian (npm)
- Aug 14, 2025
Malicious code in geyser_3d9l4_scsig_island (npm)
- Aug 14, 2025
Malicious code in gevpro (npm)
- Aug 14, 2025
Malicious code in gettick-node (npm)
- Aug 14, 2025
Malicious code in getpaid (npm)
- Aug 14, 2025
Malicious code in getissues (npm)
- Aug 14, 2025
Malicious code in getissue (npm)
- Aug 14, 2025
Malicious code in gethostinfo (npm)
- Aug 14, 2025
Malicious code in getcookies (npm)
- Aug 14, 2025
Malicious code in getamped (npm)
- Aug 14, 2025
Malicious code in get-stats-from-planning-file (npm)
- Aug 14, 2025
Malicious code in get-start-synpress (npm)
- Aug 14, 2025
Malicious code in get-asphalt-9-legends-credits-generator (npm)
- Aug 14, 2025
Malicious code in get-ark-survival-ancient-amber-generator (npm)
- Aug 14, 2025
Malicious code in gestor-creditos (npm)
- Aug 14, 2025
Malicious code in gestaouab (npm)
- Aug 14, 2025
Malicious code in gestalt-borders (npm)
- Aug 14, 2025
Malicious code in gestalt-avatar (npm)
- Aug 14, 2025
Malicious code in gestalt-accessibility-token (npm)
- Aug 14, 2025
Malicious code in gercon (npm)
- Aug 14, 2025
Malicious code in georgios (npm)
- Aug 14, 2025
Malicious code in georef (npm)
- Aug 14, 2025
Malicious code in geoposty (npm)
- Aug 14, 2025
Malicious code in geoport-i18n (npm)
- Aug 14, 2025
Malicious code in geomorphology-petrology-pm2-antd (npm)
- Aug 14, 2025
Malicious code in geomorphology-leda-subscription-magellan (npm)
- Aug 14, 2025
Malicious code in geomnet (npm)
- Aug 14, 2025
Malicious code in geomip (npm)
- Aug 14, 2025
Malicious code in geomatics (npm)
- Aug 14, 2025
Malicious code in geojackal (npm)
- Aug 14, 2025
Malicious code in geoflux (npm)
- Aug 14, 2025
Malicious code in geofake (npm)
- Aug 14, 2025
Malicious code in geoevent (npm)
- Aug 14, 2025
Malicious code in geodynamo-standard-meteor-string (npm)
- Aug 14, 2025
Malicious code in geodynamo-inflation-superflare-spinner (npm)
- Aug 14, 2025
Malicious code in geodynamo-geochemistry-brane-antares (npm)
- Aug 14, 2025
Malicious code in geodatix (npm)
- Aug 14, 2025
Malicious code in geochronology-polaris-elektra-sociobiology (npm)
- Aug 14, 2025
Malicious code in geochronology-markdown-jupiter-dotenv-parse-variables (npm)
- Aug 14, 2025
Malicious code in geochronology-luminescence-electron-builder-supernova (npm)
- Aug 14, 2025
Malicious code in geochemistry-shelljs-terser-webpack-plugin-koa (npm)
- Aug 14, 2025
Malicious code in geochemistry-seismology-higgs-karma (npm)
- Aug 14, 2025
Malicious code in geochemistry-panspermia-uglify-js-pulsar (npm)
- Aug 14, 2025
Malicious code in geobase6 (npm)
- Aug 14, 2025
Malicious code in geoarchaeology-vulcan-celeste-style-loader (npm)
Page 6025 of 7,324