Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in eslint-config-10up (npm)
- Aug 14, 2025
Malicious code in eslectron (npm)
- Aug 14, 2025
Malicious code in eskema (npm)
- Aug 14, 2025
Malicious code in esgpsdemo (npm)
- Aug 14, 2025
Malicious code in escape-hatch-tooling (npm)
- Aug 14, 2025
Malicious code in esbuild-linux-arm32 (npm)
- Aug 14, 2025
Malicious code in esba (npm)
- Aug 14, 2025
Malicious code in esales-frontend (npm)
- Aug 14, 2025
Malicious code in es6templatetest (npm)
- Aug 14, 2025
Malicious code in es6guardian (npm)
- Aug 14, 2025
Malicious code in es6-prmoise (npm)
- Aug 14, 2025
Malicious code in es6-http-status-codes (npm)
- Aug 14, 2025
Malicious code in es6-demo-react-npm2 (npm)
- Aug 14, 2025
Malicious code in es-data-table (npm)
- Aug 14, 2025
Malicious code in erwin-sambalado45-sukiwir (npm)
- Aug 14, 2025
Malicious code in erwin-rojak69-kuki (npm)
- Aug 14, 2025
Malicious code in erwin-martabak50-sukiwir (npm)
- Aug 14, 2025
Malicious code in erwin-lapis73-breki (npm)
- Aug 14, 2025
Malicious code in erwin-kue45-breki (npm)
- Aug 14, 2025
Malicious code in erwin-jengkol63-breki (npm)
- Aug 14, 2025
Malicious code in erwin-enting100-sukiwir (npm)
- Aug 14, 2025
Malicious code in erwin-empal63-breki (npm)
- Aug 14, 2025
Malicious code in eruvaka (npm)
- Aug 14, 2025
Malicious code in eruification (npm)
- Aug 14, 2025
Malicious code in erroroji (npm)
- Aug 14, 2025
Malicious code in error-sun-eta-assert-error (npm)
- Aug 14, 2025
Malicious code in error-module (npm)
- Aug 14, 2025
Malicious code in error-loggerjs (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in error-iota-file-quick-shell (npm)
- Aug 14, 2025
Malicious code in error-float-report-resolve-sigma (npm)
- Aug 14, 2025
Malicious code in error-byte-earth-cache-tau (npm)
- Aug 14, 2025
Malicious code in errification (npm)
- Aug 14, 2025
Malicious code in erreee (npm)
- Aug 14, 2025
Malicious code in erquest (npm)
- Aug 14, 2025
Malicious code in erpserver (npm)
- Aug 14, 2025
Malicious code in erpold (npm)
- Aug 14, 2025
Malicious code in eroeling (npm)
- Aug 14, 2025
Malicious code in erlypda (npm)
- Aug 14, 2025
Malicious code in erlstats (npm)
- Aug 14, 2025
Malicious code in erlectron (npm)
- Aug 14, 2025
Malicious code in erlbfdmkjxktusin (npm)
- Aug 14, 2025
Malicious code in erlangfix (npm)
- Aug 14, 2025
Malicious code in eris-regulus-semantic-ui-meissa (npm)
- Aug 14, 2025
Malicious code in eris-primatology-nightmare-hologram (npm)
- Aug 14, 2025
Malicious code in eris-polaris-pulsar-cygnus (npm)
- Aug 14, 2025
Malicious code in erificatsion (npm)
- Aug 14, 2025
Malicious code in erification (npm)
- Aug 14, 2025
Malicious code in eridanus-local-gammarayburst-janus (npm)
- Aug 14, 2025
Malicious code in eridanus-grunt-puppeteer-private (npm)
- Aug 14, 2025
Malicious code in eridanus-airbnb-steganography-miranda (npm)
Page 5595 of 6,634