Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in eris-writable-docusaurus-on (npm)
- Nov 13, 2025
Malicious code in eris-umbra-dotenv-scorpius (npm)
- Nov 13, 2025
Malicious code in eris-sync-loglevel-dorado (npm)
- Nov 13, 2025
Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in eris-postgres-taurus-metabolomics (npm)
- Nov 13, 2025
Malicious code in eris-perseus-subscription-iota (npm)
- Nov 13, 2025
Malicious code in eris-jekyll-cryovolcano-charon (npm)
- Nov 13, 2025
Malicious code in eris-framework-lacerta-biomimicry (npm)
- Nov 13, 2025
Malicious code in eris-callback-boson-cosmicsilence (npm)
- Nov 13, 2025
Malicious code in eridanus-rigel-cosmiconfig-pino-pretty (npm)
- Nov 13, 2025
Malicious code in eridanus-react-bootstrap-telesto-yaml (npm)
- Nov 13, 2025
Malicious code in eridanus-paleoceanography-blitz-elektra (npm)
- Nov 13, 2025
Malicious code in eridanus-middleware-meissa-io (npm)
- Nov 13, 2025
Malicious code in eridanus-jabbah-xerxes-enceladus (npm)
- Nov 13, 2025
Malicious code in eridanus-hermes-mui-package (npm)
- Nov 13, 2025
Malicious code in eridanus-geochronology-element-ui-io (npm)
- Nov 13, 2025
Malicious code in eridanus-darkenergy-blackhole-selenium (npm)
- Nov 13, 2025
Malicious code in eridanus-cosmicsilence-heliophysics-achernar (npm)
- Nov 13, 2025
Malicious code in eridanus-buffer-colors-passport (npm)
- Nov 13, 2025
Malicious code in eridanus-antimatter-figures-dotenv-safe (npm)
- Nov 13, 2025
Malicious code in equinox-xerxes-hapi-gravity (npm)
- Nov 13, 2025
Malicious code in equinox-sedna-sequelize-convict (npm)
- Nov 13, 2025
Malicious code in equinox-sass-loader-global-nestjs (npm)
- Nov 13, 2025
Malicious code in equinox-passport-janus-websockets (npm)
- Nov 13, 2025
Malicious code in equinox-mira-jsonp-octans (npm)
- Nov 13, 2025
Malicious code in equinox-kastra-pulsar-avior (npm)
- Nov 13, 2025
Malicious code in equinox-eclipse-redis-publish (npm)
- Nov 13, 2025
Malicious code in equinox-cosmicsilence-subscription-redis (npm)
- Nov 13, 2025
Malicious code in equinox-blueshift-exosphere-tectonic (npm)
- Nov 13, 2025
Malicious code in epsilon-web-sun-test-easy (npm)
- Nov 13, 2025
Malicious code in epsilon-protected-reject-parse-benchmark (npm)
- Nov 13, 2025
Malicious code in epsilon-execute-pi-interpret-index (npm)
- Nov 13, 2025
Malicious code in epsilon-class-cluster-root-xml (npm)
- Nov 13, 2025
Malicious code in epsilon-catch-cold-beta-new (npm)
- Nov 13, 2025
Malicious code in epsilon-beta-key-double-assert (npm)
- Nov 13, 2025
Malicious code in epsilon-bash-sigma-tree-scale (npm)
- Nov 13, 2025
Malicious code in epimetheus-uninstall-cressida-sedna (npm)
- Nov 13, 2025
Malicious code in epimetheus-sagitta-cosmicweb-dactyl (npm)
- Nov 13, 2025
Malicious code in epimetheus-release-it-fetch-centaurus (npm)
- Nov 13, 2025
Malicious code in epimetheus-loglevel-membrane-solarnebula (npm)
- Nov 13, 2025
Malicious code in epimetheus-chalk-frontend-fomalhaut (npm)
- Nov 13, 2025
Malicious code in epigenetics-kinetic-prompts-taphonomy (npm)
- Nov 13, 2025
Malicious code in epigenetics-html-webpack-plugin-magellan-augmentedreality (npm)
- Nov 13, 2025
Malicious code in epigenetics-graphql-tailwindcss-abiogenesis (npm)
- Nov 13, 2025
Malicious code in epigenetics-dynamo-jsonp-odin (npm)
- Nov 13, 2025
Malicious code in epigenetics-cosmology-radiometric-fornax (npm)
- Nov 13, 2025
Malicious code in envconfig-sociobiology-palynology-meissa (npm)
- Nov 13, 2025
Malicious code in envconfig-protoplanetarydisk-dotenv-safe-isostasy (npm)
- Nov 13, 2025
Malicious code in envconfig-passport-charon-hermes (npm)
- Nov 13, 2025
Malicious code in envconfig-fornax-void-duplex (npm)
Page 347 of 4,814