Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in echo-bravo-smxd (npm)
- Aug 14, 2025
Malicious code in echo-bravo-rdlp (npm)
- Aug 14, 2025
Malicious code in echo-bot-ts-esm (npm)
- Aug 14, 2025
Malicious code in echo-bbqkj-b95az-meadow-project (npm)
- Aug 14, 2025
Malicious code in echo-avy-project (npm)
- Aug 14, 2025
Malicious code in echo-apple-ujuj (npm)
- Aug 14, 2025
Malicious code in echo-6bf-project (npm)
- Aug 14, 2025
Malicious code in echo-66viv-y325p-plume-project (npm)
- Aug 14, 2025
Malicious code in echo-5sp2s-tkxhc-aurora-project (npm)
- Aug 14, 2025
Malicious code in ecg-js-banners (npm)
- Aug 14, 2025
Malicious code in eceqoq (npm)
- Aug 14, 2025
Malicious code in ecelue (npm)
- Aug 14, 2025
Malicious code in eccmeteor (npm)
- Aug 14, 2025
Malicious code in ecademy (npm)
- Aug 14, 2025
Malicious code in eca-customer-web (npm)
- Aug 14, 2025
Malicious code in ebsjs (npm)
- Aug 14, 2025
Malicious code in ebos_lambda_utils (npm)
- Aug 14, 2025
Malicious code in ebitly (npm)
- Aug 14, 2025
Malicious code in ebfzuntxkwrklidj (npm)
- Aug 14, 2025
Malicious code in ebdhqzxjwkoipcrg (npm)
- Aug 14, 2025
Malicious code in ebay-items-react-widget-server (npm)
- Aug 14, 2025
Malicious code in eb-styles (npm)
- Aug 14, 2025
Malicious code in eazeup-service-address (npm)
- Aug 14, 2025
Malicious code in eazegraph (npm)
- Aug 14, 2025
Malicious code in eaze.com (npm)
- Aug 14, 2025
Malicious code in eatkghoyufvpznrb (npm)
- Aug 14, 2025
Malicious code in easyupnp (npm)
- Aug 14, 2025
Malicious code in easytwb (npm)
- Aug 14, 2025
Malicious code in easyply (npm)
- Aug 14, 2025
Malicious code in easydraft (npm)
- Aug 14, 2025
Malicious code in easycrm (npm)
- Aug 14, 2025
Malicious code in easybuy (npm)
- Aug 14, 2025
Malicious code in easy-zero-gamma-promise-deploy (npm)
- Aug 14, 2025
Malicious code in easy-wallet (npm)
- Aug 14, 2025
Malicious code in easy-visualize-decode-phi-meta (npm)
- Aug 14, 2025
Malicious code in easy-key-key-web-omega (npm)
- Aug 14, 2025
Malicious code in easy-encode-notify-emulate-cache (npm)
- Aug 14, 2025
Malicious code in easy-boolean-mock-proxy-stack (npm)
- Aug 14, 2025
Malicious code in earth-wind-fork-orchestrate-notify (npm)
- Aug 14, 2025
Malicious code in earth-grid-bad-visualize-warn (npm)
- Aug 14, 2025
Malicious code in earth-beta-scale-meta-cold (npm)
- Aug 14, 2025
Malicious code in earhorn (npm)
- Aug 14, 2025
Malicious code in eaoneuq1 (npm)
- Aug 14, 2025
Malicious code in eamcet (npm)
- Aug 14, 2025
Malicious code in ealert (npm)
- Aug 14, 2025
Malicious code in eagle-zenith-cev632-project (npm)
- Aug 14, 2025
Malicious code in eagle-whirlpool-mph288-project (npm)
- Aug 14, 2025
Malicious code in eagle-walnut-l9x3 (npm)
- Aug 14, 2025
Malicious code in eagle-reef-nbj731-project (npm)
- Aug 14, 2025
Malicious code in eagle-raspberry-s5k2 (npm)
Page 5609 of 6,634