Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in enterprise_script_service (npm)
- Aug 14, 2025
Malicious code in enterprise-dashboard-frontend.regex-builder-service (npm)
- Aug 14, 2025
Malicious code in entenji (npm)
- Aug 14, 2025
Malicious code in entanglement-stratosphere-titan-nucleosynthesis (npm)
- Aug 14, 2025
Malicious code in ensiname (npm)
- Aug 14, 2025
Malicious code in ensembl (npm)
- Aug 14, 2025
Malicious code in enrrabada (npm)
- Aug 14, 2025
Malicious code in enqrypt (npm)
- Aug 14, 2025
Malicious code in enogex (npm)
- Aug 14, 2025
Malicious code in enneagram (npm)
- Aug 14, 2025
Malicious code in enlink-barrenos-leo (npm)
- Aug 14, 2025
Malicious code in enkicli (npm)
- Aug 14, 2025
Malicious code in enif-version-exec-oauth (npm)
- Aug 14, 2025
Malicious code in enif-markdown-pdf-mantle-boson (npm)
- Aug 14, 2025
Malicious code in enif-eclipse-markdown-pdf-phoebe (npm)
- Aug 14, 2025
Malicious code in enif-async-panspermia-mini-css-extract-plugin (npm)
- Aug 14, 2025
Malicious code in enif-apollo-janus-hermes (npm)
- Aug 14, 2025
Malicious code in english-time (npm)
- Aug 14, 2025
Malicious code in engility (npm)
- Aug 14, 2025
Malicious code in engage-builder-templates-react (npm)
- Aug 14, 2025
Malicious code in eng-101-solutions-test (npm)
- Aug 14, 2025
Malicious code in energycap-angular2 (npm)
- Aug 14, 2025
Malicious code in energyCalculator-browser (npm)
- Aug 14, 2025
Malicious code in energyai (npm)
- Aug 14, 2025
Malicious code in energized (npm)
- Aug 14, 2025
Malicious code in endocon (npm)
- Aug 14, 2025
Malicious code in endgame-ui-input-text (npm)
- Aug 14, 2025
Malicious code in endevver (npm)
- Aug 14, 2025
Malicious code in encryptedcookies-paypal (npm)
- Aug 14, 2025
Malicious code in encrypt-layout-helper (npm)
- Aug 14, 2025
Malicious code in encrypt-compile-signal-visualize-root (npm)
- Aug 14, 2025
Malicious code in encphrujdkvxobmg (npm)
- Aug 14, 2025
Malicious code in encodeco (npm)
- Aug 14, 2025
Malicious code in enb-tanker (npm)
- Aug 14, 2025
Malicious code in en.ephoto360.com (npm)
- Aug 14, 2025
Malicious code in emulate-slow-execute-try-small (npm)
- Aug 14, 2025
Malicious code in emulate-earth-socket-rain-epsilon (npm)
- Aug 14, 2025
Malicious code in emulate-cloud-sed-wind-public (npm)
- Aug 14, 2025
Malicious code in emulate-boolean-info-enum-chi (npm)
- Aug 14, 2025
Malicious code in emteor (npm)
- Aug 14, 2025
Malicious code in emswidget (npm)
- Aug 14, 2025
Malicious code in emredis (npm)
- Aug 14, 2025
Malicious code in emr-ccd (npm)
- Aug 14, 2025
Malicious code in emoji-configsource-facebook (npm)
- Aug 14, 2025
Malicious code in emoblite (npm)
- Aug 14, 2025
Malicious code in emmet-sketch (npm)
- Aug 14, 2025
Malicious code in emis-gojs (npm)
- Aug 14, 2025
Malicious code in emilerl (npm)
- Aug 14, 2025
Malicious code in emgucv (npm)
- Aug 14, 2025
Malicious code in emgrid1 (npm)
Page 5598 of 6,634