Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in gulpreplae
1 compromised version
- Aug 19, 2022
Malware in glohbh
1 compromised version
- Aug 19, 2022
Malware in httpstatuscoxes
1 compromised version
- Aug 19, 2022
Malware in htmlpjader
1 compromised version
- Aug 19, 2022
Malware in invariqaot
1 compromised version
- Aug 19, 2022
Malware in gulpugliyk
1 compromised version
- Aug 19, 2022
Malware in gulpinstazall
1 compromised version
- Aug 19, 2022
Malware in htlparsevr2
1 compromised version
- Aug 19, 2022
Malware in genericsool
1 compromised version
- Aug 19, 2022
Malware in highlighjtjs
1 compromised version
- Aug 19, 2022
Malware in gulptypscript
1 compromised version
- Aug 19, 2022
Malware in httrperrors
1 compromised version
- Aug 19, 2022
Malware in gulpposgcss
1 compromised version
- Aug 19, 2022
Malware in ihghland
1 compromised version
- Aug 19, 2022
Malware in gulpplumkber
1 compromised version
- Aug 19, 2022
Malware in hlk
1 compromised version
- Aug 19, 2022
Malware in getstdn
1 compromised version
- Aug 19, 2022
Malware in graprqltag
1 compromised version
- Aug 19, 2022
Malware in gulpcleancs
1 compromised version
- Aug 19, 2022
Malware in glppeslint
1 compromised version
- Aug 19, 2022
Malware in hoistnonjreactstatics
1 compromised version
- Aug 19, 2022
Malware in gruntcontriblean
1 compromised version
- Aug 19, 2022
Malicious code in geactnativevecoicons (npm)
- Aug 19, 2022
Malicious code in g8untcotribwatch (npm)
- Aug 19, 2022
Malicious code in g3lpbabel (npm)
- Aug 19, 2022
Malicious code in futf4 (npm)
- Aug 19, 2022
Malicious code in funiquerandobmaoray (npm)
- Aug 19, 2022
Malicious code in fuirebagseadmi (npm)
- Aug 19, 2022
Malicious code in fuesjo (npm)
- Aug 19, 2022
Malicious code in fteam (npm)
- Aug 19, 2022
Malicious code in frontzatter (npm)
- Aug 19, 2022
Malicious code in fqaekr (npm)
- Aug 19, 2022
Malicious code in forktscheckerwebpajwkplugi (npm)
- Aug 19, 2022
Malicious code in forktscheckerwebackplugiwnalt (npm)
- Aug 19, 2022
Malicious code in foptaweome (npm)
- Aug 19, 2022
Malicious code in followredirect3 (npm)
- Aug 19, 2022
Malicious code in folior (npm)
- Aug 19, 2022
Malicious code in foermdata (npm)
- Aug 19, 2022
Malicious code in fluetffmpeg (npm)
- Aug 19, 2022
Malicious code in fjle4ize (npm)
- Aug 19, 2022
Malicious code in finuj (npm)
- Aug 19, 2022
Malicious code in findupsnc (npm)
- Aug 19, 2022
Malicious code in finauhaoler (npm)
- Aug 19, 2022
Malicious code in filtetypg (npm)
- Aug 19, 2022
Malicious code in fieloader (npm)
- Aug 19, 2022
Malicious code in fidurel (npm)
- Aug 19, 2022
Malicious code in feslintpquginbakel (npm)
- Aug 19, 2022
Malicious code in feiendlyerrorswebpackplugin (npm)
- Aug 19, 2022
Malicious code in fastg0b (npm)
- Aug 19, 2022
Malicious code in fanc6og (npm)
Page 7041 of 7,293