Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,500 total in npm · sorted newest first- Aug 14, 2025
Malicious code in eka-getuk2-kuki (npm)
- Aug 14, 2025
Malicious code in eka-dradag43-kuki (npm)
- Aug 14, 2025
Malicious code in eka-asinan10-breki (npm)
- Aug 14, 2025
Malicious code in ejungle (npm)
- Aug 14, 2025
Malicious code in ejstags (npm)
- Aug 14, 2025
Malicious code in ejson2env (npm)
- Aug 14, 2025
Malicious code in ejson-rails (npm)
- Aug 14, 2025
Malicious code in ejs-client (npm)
- Aug 14, 2025
Malicious code in ejrfsqmkdconukbl (npm)
- Aug 14, 2025
Malicious code in ejercico (npm)
- Aug 14, 2025
Malicious code in ejdgrvaqkioslhbf (npm)
- Aug 14, 2025
Malicious code in eivybsafunmzpxlg (npm)
- Aug 14, 2025
Malicious code in eip-119-json-provider (npm)
- Aug 14, 2025
Malicious code in einkaufen (npm)
- Aug 14, 2025
Malicious code in einfprog (npm)
- Aug 14, 2025
Malicious code in ein-services (npm)
- Aug 14, 2025
Malicious code in ein-loader (npm)
- Aug 14, 2025
Malicious code in eikpndvxbtfhkcas (npm)
- Aug 14, 2025
Malicious code in eikasia (npm)
- Aug 14, 2025
Malicious code in eigenstate-test-technocracy-javascript (npm)
- Aug 14, 2025
Malicious code in eigenstate-bionics-alphard-hermes (npm)
- Aug 14, 2025
Malicious code in ehxjimturwyqnzbk (npm)
- Aug 14, 2025
Malicious code in ehquvdznyglmrpxb (npm)
- Aug 14, 2025
Malicious code in ehouse (npm)
- Aug 14, 2025
Malicious code in eh-fiddle (npm)
- Aug 14, 2025
Malicious code in egudkjkpcrwhlfvy (npm)
- Aug 14, 2025
Malicious code in egrader (npm)
- Aug 14, 2025
Malicious code in egov-pep-frontend (npm)
- Aug 14, 2025
Malicious code in egnxaqfzbjhdlvkp (npm)
- Aug 14, 2025
Malicious code in egmoizjqkvybsulc (npm)
- Aug 14, 2025
Malicious code in egjs-cli (npm)
- Aug 14, 2025
Malicious code in egis-tsc (npm)
- Aug 14, 2025
Malicious code in eggplant-umbrella-aig1 (npm)
- Aug 14, 2025
Malicious code in eggplant-radish-ka52 (npm)
- Aug 14, 2025
Malicious code in eggplant-juniper-lcjd (npm)
- Aug 14, 2025
Malicious code in eggplant-grape-7uej (npm)
- Aug 14, 2025
Malicious code in eggplant-delta-8omx (npm)
- Aug 14, 2025
Malicious code in eggdrop (npm)
- Aug 14, 2025
Malicious code in eggcoin (npm)
- Aug 14, 2025
Malicious code in egg-plugin-knex (npm)
- Aug 14, 2025
Malicious code in egg-arbitrary (npm)
- Aug 14, 2025
Malicious code in eganglia (npm)
- Aug 14, 2025
Malicious code in eflectron (npm)
- Aug 14, 2025
Malicious code in efidiario (npm)
- Aug 14, 2025
Malicious code in eficsi (npm)
- Aug 14, 2025
Malicious code in efficiant (npm)
- Aug 14, 2025
Malicious code in efctqraxspudovmk (npm)
- Aug 14, 2025
Malicious code in eevxhwk (npm)
- Aug 14, 2025
Malicious code in eetesting (npm)
- Aug 14, 2025
Malicious code in eeslint-plugin-airtable (npm)
Page 5622 of 6,650