Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,500 total in npm · sorted newest first- Aug 14, 2025
Malicious code in elderberry-gmg-project (npm)
- Aug 14, 2025
Malicious code in elderberry-ggd-project (npm)
- Aug 14, 2025
Malicious code in elderberry-fig-twno (npm)
- Aug 14, 2025
Malicious code in elderberry-fig-ezih (npm)
- Aug 14, 2025
Malicious code in elderberry-echo-qwfg (npm)
- Aug 14, 2025
Malicious code in elderberry-date-fopi (npm)
- Aug 14, 2025
Malicious code in elderberry-cherry-doee (npm)
- Aug 14, 2025
Malicious code in elderberry-banana-rksd (npm)
- Aug 14, 2025
Malicious code in elderberry-banana-naio (npm)
- Aug 14, 2025
Malicious code in elderberry-apple-hffa (npm)
- Aug 14, 2025
Malicious code in elderberry-alpha-yankee-enctk (npm)
- Aug 14, 2025
Malicious code in elderberry-87f-project (npm)
- Aug 14, 2025
Malicious code in elderberry-7zy-project (npm)
- Aug 14, 2025
Malicious code in elderberry-7bb-project (npm)
- Aug 14, 2025
Malicious code in elderberry-6db-project (npm)
- Aug 14, 2025
Malicious code in elderberry-6be-project (npm)
- Aug 14, 2025
Malicious code in elderberry-686-project (npm)
- Aug 14, 2025
Malicious code in elderberry-61f-project (npm)
- Aug 14, 2025
Malicious code in eldectron (npm)
- Aug 14, 2025
Malicious code in eldctron (npm)
- Aug 14, 2025
Malicious code in elctron (npm)
- Aug 14, 2025
Malicious code in elconqore (npm)
- Aug 14, 2025
Malicious code in elcetron (npm)
- Aug 14, 2025
Malicious code in elbrusapi (npm)
- Aug 14, 2025
Malicious code in elated-mobile (npm)
- Aug 14, 2025
Malicious code in elasticsearch-shopify-client (npm)
- Aug 14, 2025
Malicious code in elasticsearch-shopify (npm)
- Aug 14, 2025
Malicious code in elasticsearch-product-search-builder (npm)
- Aug 14, 2025
Malicious code in elasticsearch-collections-client (npm)
- Aug 14, 2025
Malicious code in elara-loglevel-cressida-auth0 (npm)
- Aug 14, 2025
Malicious code in elara-eventhoriz-nightwatch-exec (npm)
- Aug 14, 2025
Malicious code in elabstest (npm)
- Aug 14, 2025
Malicious code in el4ectron (npm)
- Aug 14, 2025
Malicious code in el4ctron (npm)
- Aug 14, 2025
Malicious code in el3ectron (npm)
- Aug 14, 2025
Malicious code in el3ctron (npm)
- Aug 14, 2025
Malicious code in ekvhatmpfnzyrxdj (npm)
- Aug 14, 2025
Malicious code in eksi-server (npm)
- Aug 14, 2025
Malicious code in eko-tempe81-sukiwir (npm)
- Aug 14, 2025
Malicious code in eko-tempe26-breki (npm)
- Aug 14, 2025
Malicious code in eko-lapis68-kuki (npm)
- Aug 14, 2025
Malicious code in ekmoxrhnckljfdbp (npm)
- Aug 14, 2025
Malicious code in eklogger (npm)
- Aug 14, 2025
Malicious code in eklectron (npm)
- Aug 14, 2025
Malicious code in ekinrt (npm)
- Aug 14, 2025
Malicious code in ekectron (npm)
- Aug 14, 2025
Malicious code in ekameno (npm)
- Aug 14, 2025
Malicious code in eka-nasiuduk68-kuki (npm)
- Aug 14, 2025
Malicious code in eka-martabak89-breki (npm)
- Aug 14, 2025
Malicious code in eka-martabak4-breki (npm)
Page 5621 of 6,650