Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,500 total in npm · sorted newest first- Aug 14, 2025
Malicious code in earth-wind-fork-orchestrate-notify (npm)
- Aug 14, 2025
Malicious code in earth-grid-bad-visualize-warn (npm)
- Aug 14, 2025
Malicious code in earth-beta-scale-meta-cold (npm)
- Aug 14, 2025
Malicious code in earhorn (npm)
- Aug 14, 2025
Malicious code in eaoneuq1 (npm)
- Aug 14, 2025
Malicious code in eamcet (npm)
- Aug 14, 2025
Malicious code in ealert (npm)
- Aug 14, 2025
Malicious code in eagle-zenith-cev632-project (npm)
- Aug 14, 2025
Malicious code in eagle-whirlpool-mph288-project (npm)
- Aug 14, 2025
Malicious code in eagle-walnut-l9x3 (npm)
- Aug 14, 2025
Malicious code in eagle-reef-nbj731-project (npm)
- Aug 14, 2025
Malicious code in eagle-raspberry-s5k2 (npm)
- Aug 14, 2025
Malicious code in eagle-quill-tsk027-project (npm)
- Aug 14, 2025
Malicious code in eagle-quagmire-jfp294-project (npm)
- Aug 14, 2025
Malicious code in eagle-penguin-ifv401-project (npm)
- Aug 14, 2025
Malicious code in eagle-paradise-qdg941-project (npm)
- Aug 14, 2025
Malicious code in eagle-lilac-xok373-project (npm)
- Aug 14, 2025
Malicious code in eagle-kiwi-turs (npm)
- Aug 14, 2025
Malicious code in eagle-kiwi-brm479-project (npm)
- Aug 14, 2025
Malicious code in eagle-kilo-ncl0 (npm)
- Aug 14, 2025
Malicious code in eagle-hollow-jth740-project (npm)
- Aug 14, 2025
Malicious code in eagle-harbor-byu278-project (npm)
- Aug 14, 2025
Malicious code in eagle-elephant-jzsx (npm)
- Aug 14, 2025
Malicious code in eagle-cherry-uoym (npm)
- Aug 14, 2025
Malicious code in eagle-cherry-qdj767-project (npm)
- Aug 14, 2025
Malicious code in eagle-bark-6bag (npm)
- Aug 14, 2025
Malicious code in eagle-bamboo-abr842-project (npm)
- Aug 14, 2025
Malicious code in eagle-albatross-ttk230-project (npm)
- Aug 14, 2025
Malicious code in eadlinks (npm)
- Aug 14, 2025
Malicious code in eact (npm)
- Aug 14, 2025
Malicious code in eability (npm)
- Aug 14, 2025
Malicious code in e4lectron (npm)
- Aug 14, 2025
Malicious code in e3tt87 (npm)
- Aug 14, 2025
Malicious code in e3lectron (npm)
- Aug 14, 2025
Malicious code in e2b7dl (npm)
- Aug 14, 2025
Malicious code in e0hgxp (npm)
- Aug 14, 2025
Malicious code in dztools (npm)
- Aug 14, 2025
Malicious code in dzsagbkorawrpkwehtvm (npm)
- Aug 14, 2025
Malicious code in dzsagbkopkwehtvm (npm)
- Aug 14, 2025
Malicious code in dzialki (npm)
- Aug 14, 2025
Malicious code in dystatic (npm)
- Aug 14, 2025
Malicious code in dysonswarm-virtualreality-cypress-phoebe (npm)
- Aug 14, 2025
Malicious code in dysonswarm-eslint-config-jwt-deimos (npm)
- Aug 14, 2025
Malicious code in dysonswarm-antares-eventhoriz-process (npm)
- Aug 14, 2025
Malicious code in dyqwcllhdjugn7b4rgbead00oywfmaai (npm)
- Aug 14, 2025
Malicious code in dyplot (npm)
- Aug 14, 2025
Malicious code in dynseg-util (npm)
- Aug 14, 2025
Malicious code in dynlog (npm)
- Aug 14, 2025
Malicious code in dyneinsle (npm)
- Aug 14, 2025
Malicious code in dynamoeasy (npm)
Page 5626 of 6,650