Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @erboladaiteas/mollitia-atque-magni (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/laudantium-exercitationem-cumque (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/itaque-quidem-inventore (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/ipsa-officiis-eaque-provident (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/in-cum-autem-corporis (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/illum-odio-impedit (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/id-quas-adipisci-velit (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/hic-unde (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/harum-similique (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/harum-nemo-dignissimos (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/explicabo-optio-assumenda (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/expedita-consequuntur-nihil (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/ex-excepturi-neque-perferendis (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/et-quod (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/esse-labore-ea-facere (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/enim-saepe-aliquid-perspiciatis (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/eligendi-voluptates-quae (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/earum-non-facere-mollitia (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/doloribus-alias-corrupti (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/dolorem-unde-cumque (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/dolorem-quasi-provident-expedita (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/dolorem-possimus (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/dolorem-mollitia-nisi (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/dolor-libero-perspiciatis (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/distinctio-perferendis-ipsam (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/debitis-rerum-aut (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/cupiditate-et-exercitationem (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/culpa-est-magnam-autem (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/corporis-nesciunt-tempore (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/corporis-iusto-autem-voluptate (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/commodi-explicabo-autem (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/atque-occaecati-dolor (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/at-officiis-nostrum-odit (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/aspernatur-reiciendis (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/aspernatur-a-occaecati (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/architecto-perspiciatis-odio (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/architecto-modi-illo-dolorum (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/aperiam-vitae-accusamus-fugiat (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/animi-a-error (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/amet-reprehenderit-adipisci (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/ad-magni-voluptate (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/accusantium-quisquam-officiis (npm)
- Aug 14, 2025
Malicious code in @erboladaiteas/accusantium-nobis-amet (npm)
- Aug 14, 2025
Malicious code in @erboladaiorg/laborum-atque-recusandae (npm)
- Aug 14, 2025
Malicious code in @epc-tools/testutil-cdk-expect-policy (npm)
- Aug 14, 2025
Malicious code in @epc-tools/test (npm)
- Aug 14, 2025
Malicious code in @epc-tools/logger (npm)
- Aug 14, 2025
Malicious code in @epc-tools/jest (npm)
- Aug 14, 2025
Malicious code in @epc-tools/eslint (npm)
- Aug 14, 2025
Malicious code in @epc-libraries/driver-plan-db (npm)
Page 5181 of 6,667