Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in emulate-link-shell-async-double (npm)
- Nov 13, 2025
Malicious code in emulate-earth-lambda-iota-mock (npm)
- Nov 13, 2025
Malicious code in emulate-catch-file-mu-parse (npm)
- Nov 13, 2025
Malicious code in emulate-await-sudo-code-grid (npm)
- Nov 13, 2025
Malicious code in eleventy-delphinus-figures-async (npm)
- Nov 13, 2025
Malicious code in element-ui-oscillation-higgs-solarnebula (npm)
- Nov 13, 2025
Malicious code in element-ui-nodejs-bellatrix-hapi (npm)
- Nov 13, 2025
Malicious code in element-ui-nconf-oauth-webpack (npm)
- Nov 13, 2025
Malicious code in element-ui-jabbah-chalk-enceladus (npm)
- Nov 13, 2025
Malicious code in element-ui-fermiparadox-carpo-orogeny (npm)
- Nov 13, 2025
Malicious code in element-ui-commitlint-convict-chai (npm)
- Nov 13, 2025
Malicious code in elektra-yakutsk-cosmicray-phoenix (npm)
- Nov 13, 2025
Malicious code in elektra-xml-grus-hugo (npm)
- Nov 13, 2025
Malicious code in elektra-supercluster-genomics-heliophysics (npm)
- Nov 13, 2025
Malicious code in elektra-jekyll-ini-async (npm)
- Nov 13, 2025
Malicious code in elektra-bellatrix-neutronstar-spinner (npm)
- Nov 13, 2025
Malicious code in electron-tool-nashira-gemini (npm)
- Nov 13, 2025
Malicious code in electron-superflare-quantumfoam-inquirer (npm)
- Nov 13, 2025
Malicious code in electron-postcss-loader-yaml-pyxis (npm)
- Nov 13, 2025
Malicious code in electron-pm2-toml-test (npm)
- Nov 13, 2025
Malicious code in electron-nconf-callisto-flare (npm)
- Nov 13, 2025
Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)
- Nov 13, 2025
Malicious code in electron-builder-lint-typeorm-bulma (npm)
- Nov 13, 2025
Malicious code in electron-builder-kaus-non-blocking-europa (npm)
- Nov 13, 2025
Malicious code in electron-builder-csv-npm-asteroid (npm)
- Nov 13, 2025
Malicious code in elara-triton-quasar-async (npm)
- Nov 13, 2025
Malicious code in elara-magnetar-asteroid-cosmicray (npm)
- Nov 13, 2025
Malicious code in elara-jovian-dorado-biogeochemistry (npm)
- Nov 13, 2025
Malicious code in elara-hexo-postgres-astrochemistry (npm)
- Nov 13, 2025
Malicious code in elara-express-babel-meteor (npm)
- Nov 13, 2025
Malicious code in elara-dysonswarm-sirius-pyxis (npm)
- Nov 13, 2025
Malicious code in elara-auth-enif-prettier (npm)
- Nov 13, 2025
Malicious code in eigenstate-spectron-loopback-wormhole (npm)
- Nov 13, 2025
Malicious code in eigenstate-outercore-procyon-colors (npm)
- Nov 13, 2025
Malicious code in eigenstate-ophiuchus-sociobiology-koa (npm)
- Nov 13, 2025
Malicious code in eigenstate-gravitationalwave-config-ora (npm)
- Nov 13, 2025
Malicious code in eigenstate-electron-lithosphere-dagda (npm)
- Nov 13, 2025
Malicious code in eigenstate-electron-builder-despina-bionics (npm)
- Nov 13, 2025
Malicious code in eigenstate-auriga-module-chromedriver (npm)
- Nov 13, 2025
Malicious code in eigenstate-areology-deneb-parallax (npm)
- Nov 13, 2025
Malicious code in eclipse-ursa-element-ui-middleware (npm)
- Nov 13, 2025
Malicious code in eclipse-triton-avior-yonder (npm)
- Nov 13, 2025
Malicious code in eclipse-parsec-native-commitlint-config-angular (npm)
- Nov 13, 2025
Malicious code in eclipse-levels-lynx-nanotechnology (npm)
- Nov 13, 2025
Malicious code in eclipse-hercules-europa-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in eclipse-eridanus-upgrade-registry (npm)
- Nov 13, 2025
Malicious code in easy-throw-cron-rho-sanitize (npm)
- Nov 13, 2025
Malicious code in easy-serialize-omicron-mu-assert (npm)
- Nov 13, 2025
Malicious code in easy-pipe-signal-proxy-uglify (npm)
- Nov 13, 2025
Malicious code in easy-parse-async-xi-analyze (npm)
Page 349 of 4,814