Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in event-lib (npm)
- Aug 14, 2025
Malicious code in evanyou (npm)
- Aug 14, 2025
Malicious code in evalist (npm)
- Aug 14, 2025
Malicious code in ev-scroll-loader (npm)
- Aug 14, 2025
Malicious code in ev-scaffolder (npm)
- Aug 14, 2025
Malicious code in ev-refresh-cf (npm)
- Aug 14, 2025
Malicious code in euuoon (npm)
- Aug 14, 2025
Malicious code in europcar (npm)
- Aug 14, 2025
Malicious code in europaphp (npm)
- Aug 14, 2025
Malicious code in europa-zenith-deneb-nestjs (npm)
- Aug 14, 2025
Malicious code in europa-ultra-epimetheus-fermion (npm)
- Aug 14, 2025
Malicious code in europa-standard-bellatrix-test (npm)
- Aug 14, 2025
Malicious code in europa-sqlite-neutronstar-quasar (npm)
- Aug 14, 2025
Malicious code in europa-ora-exosphere-norma (npm)
- Aug 14, 2025
Malicious code in europa-indus-puppeteer-polaris (npm)
- Aug 14, 2025
Malicious code in europa-hugo-spectron-foundation-chalk-server (npm)
- Aug 14, 2025
Malicious code in europa-fornax-fomalhaut-config (npm)
- Aug 14, 2025
Malicious code in europa-express-development-luminescence (npm)
- Aug 14, 2025
Malicious code in euromedia-gulp (npm)
- Aug 14, 2025
Malicious code in euogctiabnwpskjx (npm)
- Aug 14, 2025
Malicious code in eulogy (npm)
- Aug 14, 2025
Malicious code in eui-react-scripts (npm)
- Aug 14, 2025
Malicious code in euclides (npm)
- Aug 14, 2025
Malicious code in eu.fairmanager.mobile (npm)
- Aug 14, 2025
Malicious code in etymonline (npm)
- Aug 14, 2025
Malicious code in etwitty (npm)
- Aug 14, 2025
Malicious code in etplugin (npm)
- Aug 14, 2025
Malicious code in etltools (npm)
- Aug 14, 2025
Malicious code in ethology-sedimentology-geoarchaeology-geomorphology (npm)
- Aug 14, 2025
Malicious code in ethology-bootes-dotenv-safe-xerxes (npm)
- Aug 14, 2025
Malicious code in ethers-util.js (npm)
- Aug 14, 2025
Malicious code in ethers-util (npm)
- Aug 14, 2025
Malicious code in etherres (npm)
1 compromised version
- Aug 14, 2025
Malicious code in ethermega (npm)
- Aug 14, 2025
Malicious code in ethan-prime-time (npm)
- Aug 14, 2025
Malicious code in eth_private_key_to_address (npm)
- Aug 14, 2025
Malicious code in etdpqayjnkhvfkzi (npm)
- Aug 14, 2025
Malicious code in etch-in-stone (npm)
- Aug 14, 2025
Malicious code in etcdrepl (npm)
- Aug 14, 2025
Malicious code in eta-xml-wind-parse-cron (npm)
- Aug 14, 2025
Malicious code in eta-reject-fork-char-cat (npm)
- Aug 14, 2025
Malicious code in eta-chi-socket-easy-module (npm)
- Aug 14, 2025
Malicious code in eswyoivnamrkuftd (npm)
- Aug 14, 2025
Malicious code in estudoweb (npm)
- Aug 14, 2025
Malicious code in estroids (npm)
- Aug 14, 2025
Malicious code in estosneu1 (npm)
- Aug 14, 2025
Malicious code in essence-qdi4e-o5akm-jungle-project (npm)
- Aug 14, 2025
Malicious code in essence-hlqjl-6drw8-aurora-project (npm)
- Aug 14, 2025
Malicious code in essence-gr20e-klty5-opal-project (npm)
- Aug 14, 2025
Malicious code in essence-dszwm-d3xs1-cascade-project (npm)
Page 5593 of 6,634