Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in epress (npm)
- Aug 14, 2025
Malicious code in epoch-calendar (npm)
- Aug 14, 2025
Malicious code in eplith (npm)
- Aug 14, 2025
Malicious code in eplectron (npm)
- Aug 14, 2025
Malicious code in episode-free-gems-passes-tool-home-facebook (npm)
- Aug 14, 2025
Malicious code in episode-free-gems-and-passes-300 (npm)
- Aug 14, 2025
Malicious code in epimetheus-unuk-galaxy-leda (npm)
- Aug 14, 2025
Malicious code in epimetheus-quantum-element-ui-cosmiconfig (npm)
- Aug 14, 2025
Malicious code in epimetheus-mensa-sedimentology-react-bootstrap (npm)
- Aug 14, 2025
Malicious code in epimetheus-chromedriver-redis-asthenosphere (npm)
- Aug 14, 2025
Malicious code in epimetheus-bunyan-antares-pulsar (npm)
- Aug 14, 2025
Malicious code in epigenetics-update-glaciology-exoplanetology (npm)
- Aug 14, 2025
Malicious code in epigenetics-tethys-kronos-higgs (npm)
- Aug 14, 2025
Malicious code in epigenetics-procyon-pm2-magnetar (npm)
- Aug 14, 2025
Malicious code in epigenetics-filament-speleology-pegasus (npm)
- Aug 14, 2025
Malicious code in epigenetics-dactyl-cressida-equinox (npm)
- Aug 14, 2025
Malicious code in epigenetics-centauri-lacerta-primatology (npm)
- Aug 14, 2025
Malicious code in epicgamesfooterprops (npm)
- Aug 14, 2025
Malicious code in epicgames-freebies-claimer (npm)
- Aug 14, 2025
Malicious code in epicdice (npm)
- Aug 14, 2025
Malicious code in epic-launcher-integration (npm)
105 compromised versions
- Aug 14, 2025
Malicious code in epic-client (npm)
- Aug 14, 2025
Malicious code in epic-auth (npm)
- Aug 14, 2025
Malicious code in epibot (npm)
- Aug 14, 2025
Malicious code in epgdata (npm)
- Aug 14, 2025
Malicious code in epfamvir (npm)
- Aug 14, 2025
Malicious code in epectron (npm)
- Aug 14, 2025
Malicious code in epdesigns (npm)
- Aug 14, 2025
Malicious code in eotyacvmbnzijgpd (npm)
- Aug 14, 2025
Malicious code in eosio-toppings (npm)
- Aug 14, 2025
Malicious code in eosio-reference-chrome-extension-authenticator-app (npm)
- Aug 14, 2025
Malicious code in eos-transfers (npm)
- Aug 14, 2025
Malicious code in eombfe (npm)
- Aug 14, 2025
Malicious code in eolectron (npm)
- Aug 14, 2025
Malicious code in eoectron (npm)
- Aug 14, 2025
Malicious code in enyomaton (npm)
- Aug 14, 2025
Malicious code in enwrite (npm)
- Aug 14, 2025
Malicious code in environment-inc (npm)
- Aug 14, 2025
Malicious code in enviromap (npm)
- Aug 14, 2025
Malicious code in envconfig-grunt-apex-canopus (npm)
- Aug 14, 2025
Malicious code in envconfig-deimos-astro-test (npm)
- Aug 14, 2025
Malicious code in envconfig-cross-env-ariel-enceladus (npm)
- Aug 14, 2025
Malicious code in envconfig-borealis-io-typeorm (npm)
- Aug 14, 2025
Malicious code in envbang (npm)
- Aug 14, 2025
Malicious code in env-variables-extension (npm)
- Aug 14, 2025
Malicious code in enum-sigma-test-double-container (npm)
- Aug 14, 2025
Malicious code in enum-beta-java-double-encrypt (npm)
- Aug 14, 2025
Malicious code in entrypoint-paypal (npm)
- Aug 14, 2025
Malicious code in entjava (npm)
- Aug 14, 2025
Malicious code in entertrep (npm)
Page 5597 of 6,634