Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in hogajnjs (npm)
- Aug 19, 2022
Malicious code in hlk (npm)
- Aug 19, 2022
Malicious code in hjsbesutify (npm)
- Aug 19, 2022
Malicious code in hixletpaiprs (npm)
- Aug 19, 2022
Malicious code in hirdeis (npm)
- Aug 19, 2022
Malicious code in hintstaged (npm)
- Aug 19, 2022
Malicious code in highlighjtjs (npm)
- Aug 19, 2022
Malicious code in hhuen (npm)
- Aug 19, 2022
Malicious code in hfilesa3ver (npm)
- Aug 19, 2022
Malicious code in heflectmetadata (npm)
- Aug 19, 2022
Malicious code in hashsu7m (npm)
- Aug 19, 2022
Malicious code in hapollocaheinmemory (npm)
- Aug 19, 2022
Malicious code in h6mlentiies (npm)
- Aug 19, 2022
Malicious code in gzpixizu (npm)
- Aug 19, 2022
Malicious code in guzpless (npm)
- Aug 19, 2022
Malicious code in gurbpautroprefixer (npm)
- Aug 19, 2022
Malicious code in gupnotify (npm)
- Aug 19, 2022
Malicious code in gulpuil (npm)
- Aug 19, 2022
Malicious code in gulpugliyk (npm)
- Aug 19, 2022
Malicious code in gulptypscript (npm)
- Aug 19, 2022
Malicious code in gulptemplte (npm)
- Aug 19, 2022
Malicious code in gulpsourcemuaps (npm)
- Aug 19, 2022
Malicious code in gulpreplae (npm)
- Aug 19, 2022
Malicious code in gulpposgcss (npm)
- Aug 19, 2022
Malicious code in gulpplumkber (npm)
- Aug 19, 2022
Malicious code in gulpmiiycsns (npm)
- Aug 19, 2022
Malicious code in gulplosdplucgins (npm)
- Aug 19, 2022
Malicious code in gulpinstazall (npm)
- Aug 19, 2022
Malicious code in gulpimagemib (npm)
- Aug 19, 2022
Malicious code in gulpfllter (npm)
- Aug 19, 2022
Malicious code in gulpcleancs (npm)
- Aug 19, 2022
Malicious code in guljshint (npm)
- Aug 19, 2022
Malicious code in gugpmshell (npm)
- Aug 19, 2022
Malicious code in gugpconilict (npm)
- Aug 19, 2022
Malicious code in gruntcontriblean (npm)
- Aug 19, 2022
Malicious code in gruntcontribjsint (npm)
- Aug 19, 2022
Malicious code in gruntconric4opy (npm)
- Aug 19, 2022
Malicious code in grtanhqltools (npm)
- Aug 19, 2022
Malicious code in grgtgparse (npm)
- Aug 19, 2022
Malicious code in graymatte5r (npm)
- Aug 19, 2022
Malicious code in graprqltag (npm)
- Aug 19, 2022
Malicious code in gq4tport (npm)
- Aug 19, 2022
Malicious code in googleaips (npm)
- Aug 19, 2022
Malicious code in glpsass (npm)
- Aug 19, 2022
Malicious code in glppeslint (npm)
- Aug 19, 2022
Malicious code in glohbh (npm)
- Aug 19, 2022
Malicious code in getstdn (npm)
- Aug 19, 2022
Malicious code in getectort (npm)
- Aug 19, 2022
Malicious code in genericsool (npm)
- Aug 19, 2022
Malicious code in garcefulfs (npm)
Page 7039 of 7,293