Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in eagle-quill-tsk027-project (npm)
- Aug 14, 2025
Malicious code in eagle-quagmire-jfp294-project (npm)
- Aug 14, 2025
Malicious code in eagle-penguin-ifv401-project (npm)
- Aug 14, 2025
Malicious code in eagle-paradise-qdg941-project (npm)
- Aug 14, 2025
Malicious code in eagle-lilac-xok373-project (npm)
- Aug 14, 2025
Malicious code in eagle-kiwi-turs (npm)
- Aug 14, 2025
Malicious code in eagle-kiwi-brm479-project (npm)
- Aug 14, 2025
Malicious code in eagle-kilo-ncl0 (npm)
- Aug 14, 2025
Malicious code in eagle-hollow-jth740-project (npm)
- Aug 14, 2025
Malicious code in eagle-harbor-byu278-project (npm)
- Aug 14, 2025
Malicious code in eagle-elephant-jzsx (npm)
- Aug 14, 2025
Malicious code in eagle-cherry-uoym (npm)
- Aug 14, 2025
Malicious code in eagle-cherry-qdj767-project (npm)
- Aug 14, 2025
Malicious code in eagle-bark-6bag (npm)
- Aug 14, 2025
Malicious code in eagle-bamboo-abr842-project (npm)
- Aug 14, 2025
Malicious code in eagle-albatross-ttk230-project (npm)
- Aug 14, 2025
Malicious code in eadlinks (npm)
- Aug 14, 2025
Malicious code in eact (npm)
- Aug 14, 2025
Malicious code in eability (npm)
- Aug 14, 2025
Malicious code in e4lectron (npm)
- Aug 14, 2025
Malicious code in e3tt87 (npm)
- Aug 14, 2025
Malicious code in e3lectron (npm)
- Aug 14, 2025
Malicious code in e2b7dl (npm)
- Aug 14, 2025
Malicious code in e0hgxp (npm)
- Aug 14, 2025
Malicious code in dztools (npm)
- Aug 14, 2025
Malicious code in dzsagbkorawrpkwehtvm (npm)
- Aug 14, 2025
Malicious code in dzsagbkopkwehtvm (npm)
- Aug 14, 2025
Malicious code in dzialki (npm)
- Aug 14, 2025
Malicious code in dystatic (npm)
- Aug 14, 2025
Malicious code in dysonswarm-virtualreality-cypress-phoebe (npm)
- Aug 14, 2025
Malicious code in dysonswarm-eslint-config-jwt-deimos (npm)
- Aug 14, 2025
Malicious code in dysonswarm-antares-eventhoriz-process (npm)
- Aug 14, 2025
Malicious code in dyqwcllhdjugn7b4rgbead00oywfmaai (npm)
- Aug 14, 2025
Malicious code in dyplot (npm)
- Aug 14, 2025
Malicious code in dynseg-util (npm)
- Aug 14, 2025
Malicious code in dynlog (npm)
- Aug 14, 2025
Malicious code in dyneinsle (npm)
- Aug 14, 2025
Malicious code in dynamoeasy (npm)
- Aug 14, 2025
Malicious code in dynamo-x9oeo-poe19-horizon-project (npm)
- Aug 14, 2025
Malicious code in dynamo-r1fvy-txt19-yarn-project (npm)
- Aug 14, 2025
Malicious code in dynamo-brane-mechatronics-aether (npm)
- Aug 14, 2025
Malicious code in dynamo-asthenosphere-protractor-phoebe (npm)
- Aug 14, 2025
Malicious code in dynamic-import-webpack (npm)
1 compromised version
- Aug 14, 2025
Malicious code in dynamic-form-components (npm)
- Aug 14, 2025
Malicious code in dynalogin (npm)
- Aug 14, 2025
Malicious code in dyna-travel-ui-select-air-trip (npm)
- Aug 14, 2025
Malicious code in dyna-travel-api (npm)
- Aug 14, 2025
Malicious code in dyismcwjuvrftako (npm)
- Aug 14, 2025
Malicious code in dxpress (npm)
- Aug 14, 2025
Malicious code in dxp-web (npm)
Page 5610 of 6,634