Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ember-x2dls-1ovc2-harmony-project (npm)
- Aug 14, 2025
Malicious code in ember-tm7wc-1sinr-celestial-project (npm)
- Aug 14, 2025
Malicious code in ember-testing (npm)
- Aug 14, 2025
Malicious code in ember-somx2-oysio-zephyr-project (npm)
- Aug 14, 2025
Malicious code in ember-qt0xk-mw6hu-glow-project (npm)
- Aug 14, 2025
Malicious code in ember-qs6jb-mj6qk-serenity-project (npm)
- Aug 14, 2025
Malicious code in ember-pvd7i-encu7-yarn-project (npm)
- Aug 14, 2025
Malicious code in ember-pt-components (npm)
- Aug 14, 2025
Malicious code in ember-production-deprecations (npm)
- Aug 14, 2025
Malicious code in ember-normalize-url-shim (npm)
- Aug 14, 2025
Malicious code in ember-module-migration (npm)
- Aug 14, 2025
Malicious code in ember-mfp-digest-display (npm)
- Aug 14, 2025
Malicious code in ember-i87hx-31r2h-keystone-project (npm)
- Aug 14, 2025
Malicious code in ember-gzwej-nr3ur-pinnacle-project (npm)
- Aug 14, 2025
Malicious code in ember-cli-ui-element (npm)
- Aug 14, 2025
Malicious code in ember-cli-compton (npm)
- Aug 14, 2025
Malicious code in ember-cli-bable (npm)
- Aug 14, 2025
Malicious code in ember-a7mt4-7l4rs-sky-project (npm)
- Aug 14, 2025
Malicious code in ember-1puwa-gfi2w-dynamo-project (npm)
- Aug 14, 2025
Malicious code in embelinux (npm)
- Aug 14, 2025
Malicious code in embedded-finance (npm)
- Aug 14, 2025
Malicious code in email-service-wrapper (npm)
- Aug 14, 2025
Malicious code in email-pattern (npm)
- Aug 14, 2025
Malicious code in email-dig (npm)
- Aug 14, 2025
Malicious code in elzdkiboravuxmhq (npm)
- Aug 14, 2025
Malicious code in elwectron (npm)
- Aug 14, 2025
Malicious code in elwctron (npm)
- Aug 14, 2025
Malicious code in elsectron (npm)
- Aug 14, 2025
Malicious code in elsctron (npm)
- Aug 14, 2025
Malicious code in elresas (npm)
- Aug 14, 2025
Malicious code in elrepo (npm)
- Aug 14, 2025
Malicious code in elrectron (npm)
- Aug 14, 2025
Malicious code in elrctron (npm)
- Aug 14, 2025
Malicious code in elptwpf (npm)
- Aug 14, 2025
Malicious code in elprices-models (npm)
- Aug 14, 2025
Malicious code in elpectron (npm)
- Aug 14, 2025
Malicious code in elohmrowblah (npm)
- Aug 14, 2025
Malicious code in eloectron (npm)
- Aug 14, 2025
Malicious code in ellentang (npm)
- Aug 14, 2025
Malicious code in ellectron (npm)
- Aug 14, 2025
Malicious code in elkhorn (npm)
- Aug 14, 2025
Malicious code in elkectron (npm)
- Aug 14, 2025
Malicious code in elitist (npm)
- Aug 14, 2025
Malicious code in elieat (npm)
- Aug 14, 2025
Malicious code in elggob (npm)
- Aug 14, 2025
Malicious code in elfectron (npm)
- Aug 14, 2025
Malicious code in elfctron (npm)
- Aug 14, 2025
Malicious code in elextron (npm)
- Aug 14, 2025
Malicious code in elexctron (npm)
- Aug 14, 2025
Malicious code in elewctron (npm)
Page 5600 of 6,634