Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in elderberry-7zy-project (npm)
- Aug 14, 2025
Malicious code in elderberry-7bb-project (npm)
- Aug 14, 2025
Malicious code in elderberry-6db-project (npm)
- Aug 14, 2025
Malicious code in elderberry-6be-project (npm)
- Aug 14, 2025
Malicious code in elderberry-686-project (npm)
- Aug 14, 2025
Malicious code in elderberry-61f-project (npm)
- Aug 14, 2025
Malicious code in eldectron (npm)
- Aug 14, 2025
Malicious code in eldctron (npm)
- Aug 14, 2025
Malicious code in elctron (npm)
- Aug 14, 2025
Malicious code in elconqore (npm)
- Aug 14, 2025
Malicious code in elcetron (npm)
- Aug 14, 2025
Malicious code in elbrusapi (npm)
- Aug 14, 2025
Malicious code in elated-mobile (npm)
- Aug 14, 2025
Malicious code in elasticsearch-shopify-client (npm)
- Aug 14, 2025
Malicious code in elasticsearch-shopify (npm)
- Aug 14, 2025
Malicious code in elasticsearch-product-search-builder (npm)
- Aug 14, 2025
Malicious code in elasticsearch-collections-client (npm)
- Aug 14, 2025
Malicious code in elara-loglevel-cressida-auth0 (npm)
- Aug 14, 2025
Malicious code in elara-eventhoriz-nightwatch-exec (npm)
- Aug 14, 2025
Malicious code in elabstest (npm)
- Aug 14, 2025
Malicious code in el4ectron (npm)
- Aug 14, 2025
Malicious code in el4ctron (npm)
- Aug 14, 2025
Malicious code in el3ectron (npm)
- Aug 14, 2025
Malicious code in el3ctron (npm)
- Aug 14, 2025
Malicious code in ekvhatmpfnzyrxdj (npm)
- Aug 14, 2025
Malicious code in eksi-server (npm)
- Aug 14, 2025
Malicious code in eko-tempe81-sukiwir (npm)
- Aug 14, 2025
Malicious code in eko-tempe26-breki (npm)
- Aug 14, 2025
Malicious code in eko-lapis68-kuki (npm)
- Aug 14, 2025
Malicious code in ekmoxrhnckljfdbp (npm)
- Aug 14, 2025
Malicious code in eklogger (npm)
- Aug 14, 2025
Malicious code in eklectron (npm)
- Aug 14, 2025
Malicious code in ekinrt (npm)
- Aug 14, 2025
Malicious code in ekectron (npm)
- Aug 14, 2025
Malicious code in ekameno (npm)
- Aug 14, 2025
Malicious code in eka-nasiuduk68-kuki (npm)
- Aug 14, 2025
Malicious code in eka-martabak89-breki (npm)
- Aug 14, 2025
Malicious code in eka-martabak4-breki (npm)
- Aug 14, 2025
Malicious code in eka-getuk2-kuki (npm)
- Aug 14, 2025
Malicious code in eka-dradag43-kuki (npm)
- Aug 14, 2025
Malicious code in eka-asinan10-breki (npm)
- Aug 14, 2025
Malicious code in ejungle (npm)
- Aug 14, 2025
Malicious code in ejstags (npm)
- Aug 14, 2025
Malicious code in ejson2env (npm)
- Aug 14, 2025
Malicious code in ejson-rails (npm)
- Aug 14, 2025
Malicious code in ejs-client (npm)
- Aug 14, 2025
Malicious code in ejrfsqmkdconukbl (npm)
- Aug 14, 2025
Malicious code in ejercico (npm)
- Aug 14, 2025
Malicious code in ejdgrvaqkioslhbf (npm)
- Aug 14, 2025
Malicious code in eivybsafunmzpxlg (npm)
Page 5605 of 6,634