Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ericlesch (npm)
- Aug 14, 2025
Malicious code in erick-pisang9-sukiwir (npm)
- Aug 14, 2025
Malicious code in erick-kue8-breki (npm)
- Aug 14, 2025
Malicious code in erick-kue2-breki (npm)
- Aug 14, 2025
Malicious code in erick-kue100-sukiwir (npm)
- Aug 14, 2025
Malicious code in erick-ikan48-sukiwir (npm)
- Aug 14, 2025
Malicious code in erick-getuk30-sukiwir (npm)
- Aug 14, 2025
Malicious code in ericcui (npm)
- Aug 14, 2025
Malicious code in ergo (npm)
- Aug 14, 2025
Malicious code in erfxlbtuswmcokha (npm)
- Aug 14, 2025
Malicious code in erepair (npm)
- Aug 14, 2025
Malicious code in erb_lint (npm)
- Aug 14, 2025
Malicious code in erb-mux (npm)
- Aug 14, 2025
Malicious code in eraxus (npm)
- Aug 14, 2025
Malicious code in eragon (npm)
- Aug 14, 2025
Malicious code in erafovnee (npm)
- Aug 14, 2025
Malicious code in eract-native-components (npm)
- Aug 14, 2025
Malicious code in eract-dom (npm)
- Aug 14, 2025
Malicious code in equival (npm)
- Aug 14, 2025
Malicious code in equip_components (npm)
- Aug 14, 2025
Malicious code in equinox_y3yph_axo0u_alchemy (npm)
- Aug 14, 2025
Malicious code in equinox_w5hjf_hkv7q_dusk (npm)
- Aug 14, 2025
Malicious code in equinox_t25fu_nct45_topaz (npm)
- Aug 14, 2025
Malicious code in equinox_kmbuc_mlhih_oasis (npm)
- Aug 14, 2025
Malicious code in equinox_k6hd3_hrmfw_zephyr (npm)
- Aug 14, 2025
Malicious code in equinox_c7m2e_b1ae0_obelisk (npm)
- Aug 14, 2025
Malicious code in equinox_6rmru_c2n3h_illusion (npm)
- Aug 14, 2025
Malicious code in equinox-ziggurat-15nf (npm)
- Aug 14, 2025
Malicious code in equinox-vinegar-x6tf (npm)
- Aug 14, 2025
Malicious code in equinox-vinegar-49f1 (npm)
- Aug 14, 2025
Malicious code in equinox-vega-buffer-fusion (npm)
- Aug 14, 2025
Malicious code in equinox-papa-x4mz (npm)
- Aug 14, 2025
Malicious code in equinox-igloo-z3l4 (npm)
- Aug 14, 2025
Malicious code in equinox-iceberg-g7zo (npm)
- Aug 14, 2025
Malicious code in equinox-hydra-antares-weywot (npm)
- Aug 14, 2025
Malicious code in equinox-cli-helmet-quasarjet (npm)
- Aug 14, 2025
Malicious code in equinox-child-process-html-webpack-plugin-frontend (npm)
- Aug 14, 2025
Malicious code in equinox-betelgeuse-postcss-loader-playwright (npm)
- Aug 14, 2025
Malicious code in equinox-apple-zrio (npm)
- Aug 14, 2025
Malicious code in equinox-airplane-lq0x (npm)
- Aug 14, 2025
Malicious code in equests (npm)
- Aug 14, 2025
Malicious code in equest (npm)
- Aug 14, 2025
Malicious code in eqpxkzacskbhriug (npm)
- Aug 14, 2025
Malicious code in eqpiszdunakcfkjr (npm)
- Aug 14, 2025
Malicious code in epxresso (npm)
4 compromised versions
- Aug 14, 2025
Malicious code in epxress (npm)
- Aug 14, 2025
Malicious code in epsilon-tree-easy-decrypt-iota (npm)
- Aug 14, 2025
Malicious code in epsilon-test-slow-daemon-root (npm)
- Aug 14, 2025
Malicious code in epsilon-scale-error-debug-container (npm)
- Aug 14, 2025
Malicious code in epshgrid (npm)
Page 5596 of 6,634