Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in imagemu8
1 compromised version
- Aug 19, 2022
Malware in httpsrver
1 compromised version
- Aug 19, 2022
Malware in htmlminifire
1 compromised version
- Aug 19, 2022
Malware in garcefulfs
1 compromised version
- Aug 19, 2022
Malware in hintstaged
1 compromised version
- Aug 19, 2022
Malware in googleaips
1 compromised version
- Aug 19, 2022
Malware in ioderits
1 compromised version
- Aug 19, 2022
Malware in gzpixizu
1 compromised version
- Aug 19, 2022
Malware in hutpproxymiddleware
1 compromised version
- Aug 19, 2022
Malware in gruntcontribjsint
1 compromised version
- Aug 19, 2022
Malware in inxi
1 compromised version
- Aug 19, 2022
Malware in gugpconilict
1 compromised version
- Aug 19, 2022
Malware in gulplosdplucgins
1 compromised version
- Aug 19, 2022
Malware in gugpmshell
1 compromised version
- Aug 19, 2022
Malware in gulpsourcemuaps
1 compromised version
- Aug 19, 2022
Malware in hapollocaheinmemory
1 compromised version
- Aug 19, 2022
Malware in gurbpautroprefixer
1 compromised version
- Aug 19, 2022
Malware in hhuen
1 compromised version
- Aug 19, 2022
Malware in gulpmiiycsns
1 compromised version
- Aug 19, 2022
Malware in infyl
1 compromised version
- Aug 19, 2022
Malware in gulpfllter
1 compromised version
- Aug 19, 2022
Malware in htmlwebpacplulin
1 compromised version
- Aug 19, 2022
Malware in graymatte5r
1 compromised version
- Aug 19, 2022
Malware in hjsbesutify
1 compromised version
- Aug 19, 2022
Malware in hfilesa3ver
1 compromised version
- Aug 19, 2022
Malware in husy
1 compromised version
- Aug 19, 2022
Malware in grgtgparse
1 compromised version
- Aug 19, 2022
Malware in h6mlentiies
1 compromised version
- Aug 19, 2022
Malware in gupnotify
1 compromised version
- Aug 19, 2022
Malware in guzpless
1 compromised version
- Aug 19, 2022
Malware in glpsass
1 compromised version
- Aug 19, 2022
Malware in gulptemplte
1 compromised version
- Aug 19, 2022
Malware in hirdeis
1 compromised version
- Aug 19, 2022
Malware in getectort
1 compromised version
- Aug 19, 2022
Malware in heflectmetadata
1 compromised version
- Aug 19, 2022
Malware in idejtityobjproxy
1 compromised version
- Aug 19, 2022
Malware in gulpuil
1 compromised version
- Aug 19, 2022
Malware in immutoabilityhelper
1 compromised version
- Aug 19, 2022
Malware in hogajnjs
1 compromised version
- Aug 19, 2022
Malware in hpathexists
1 compromised version
- Aug 19, 2022
Malware in hixletpaiprs
1 compromised version
- Aug 19, 2022
Malware in gruntconric4opy
1 compromised version
- Aug 19, 2022
Malware in guljshint
1 compromised version
- Aug 19, 2022
Malware in hashsu7m
1 compromised version
- Aug 19, 2022
Malware in httpproxyagnc
1 compromised version
- Aug 19, 2022
Malware in gulpimagemib
1 compromised version
- Aug 19, 2022
Malware in ierbase
1 compromised version
- Aug 19, 2022
Malware in httppoy
1 compromised version
- Aug 19, 2022
Malware in grtanhqltools
1 compromised version
- Aug 19, 2022
Malware in gq4tport
1 compromised version
Page 7040 of 7,293