Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in elevtron (npm)
- Aug 14, 2025
Malicious code in elevio-editor (npm)
- Aug 14, 2025
Malicious code in elevio-addon-support (npm)
- Aug 14, 2025
Malicious code in eleventy-xerxes-ora-global (npm)
- Aug 14, 2025
Malicious code in eleventy-volcanology-quasar-celeste (npm)
- Aug 14, 2025
Malicious code in eleventy-miranda-antares-halley (npm)
- Aug 14, 2025
Malicious code in eleventy-galaxy-phenomic-helmet (npm)
- Aug 14, 2025
Malicious code in eleventy-augmentedreality-npm-mira (npm)
- Aug 14, 2025
Malicious code in elevctron (npm)
- Aug 14, 2025
Malicious code in eletron (npm)
- Aug 14, 2025
Malicious code in eletcron (npm)
- Aug 14, 2025
Malicious code in elesctron (npm)
- Aug 14, 2025
Malicious code in elerctron (npm)
- Aug 14, 2025
Malicious code in elephat (npm)
- Aug 14, 2025
Malicious code in elephant_zxh2e_243yp_yew (npm)
- Aug 14, 2025
Malicious code in elephant_vngzh_f7e2j_zen (npm)
- Aug 14, 2025
Malicious code in elephant_gticy_l87eu_joy (npm)
- Aug 14, 2025
Malicious code in elephant_f5sl7_t8an9_karma (npm)
- Aug 14, 2025
Malicious code in elephant_ba2j9_i59yd_nectar (npm)
- Aug 14, 2025
Malicious code in elephant-volcano-nql628-project (npm)
- Aug 14, 2025
Malicious code in elephant-underpass-3w01 (npm)
- Aug 14, 2025
Malicious code in elephant-star-cjj155-project (npm)
- Aug 14, 2025
Malicious code in elephant-sapphire-fkd242-project (npm)
- Aug 14, 2025
Malicious code in elephant-rainbow-bpk2 (npm)
- Aug 14, 2025
Malicious code in elephant-quill-kit950-project (npm)
- Aug 14, 2025
Malicious code in elephant-pinnacle-zlv877-project (npm)
- Aug 14, 2025
Malicious code in elephant-pier-xs00 (npm)
- Aug 14, 2025
Malicious code in elephant-opal-xhs761-project (npm)
- Aug 14, 2025
Malicious code in elephant-opal-jah971-project (npm)
- Aug 14, 2025
Malicious code in elephant-juniper-87xw (npm)
- Aug 14, 2025
Malicious code in elephant-jellyfish-rss341-project (npm)
- Aug 14, 2025
Malicious code in elephant-iceberg-snk593-project (npm)
- Aug 14, 2025
Malicious code in elephant-iceberg-fr0u (npm)
- Aug 14, 2025
Malicious code in elephant-glacier-xsc711-project (npm)
- Aug 14, 2025
Malicious code in elephant-emerald-mjq314-project (npm)
- Aug 14, 2025
Malicious code in elementory-g-backend (npm)
- Aug 14, 2025
Malicious code in element-ui-rate-limiter-archaeogenetics-prosthetics (npm)
- Aug 14, 2025
Malicious code in element-ui-changelog-winston-nodemon (npm)
- Aug 14, 2025
Malicious code in element-ui-apollo-gatsby-process (npm)
- Aug 14, 2025
Malicious code in eleme-pay-sdk (npm)
- Aug 14, 2025
Malicious code in elektra-telesto-magnetosphere-perseus (npm)
- Aug 14, 2025
Malicious code in elektra-grus-cassini-postcss-loader (npm)
- Aug 14, 2025
Malicious code in elektra-entanglement-gulp-init (npm)
- Aug 14, 2025
Malicious code in elektra-corvus-aurora-octans (npm)
- Aug 14, 2025
Malicious code in eleftron (npm)
- Aug 14, 2025
Malicious code in elefran (npm)
- Aug 14, 2025
Malicious code in elefctron (npm)
- Aug 14, 2025
Malicious code in eleectron (npm)
- Aug 14, 2025
Malicious code in eledtron (npm)
- Aug 14, 2025
Malicious code in eledctron (npm)
Page 5601 of 6,634