Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Jun 25, 2024
Malicious code in ext-dom (npm)
1 compromised version
- Jun 25, 2024
Malicious code in exceptiongroup (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in example-helpers (npm)
1 compromised version
- Jun 25, 2024
Malicious code in example-arc-server-request-local (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in example-arc-server (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in evil911 (npm)
1 compromised version
- MAL-2024-2345Malwarenpmeverything-everywhere-all-at-once-2022-online-on-fullmovies-free-at-homesre4kJun 25, 2024
Malicious code in everything-everywhere-all-at-once-2022-online-on-fullmovies-free-at-homesre4k (npm)
1 compromised version
- Jun 25, 2024
Malicious code in everything-everywhere-all-at-once-2022-online-on-fullmovies-free-at-homesre (npm)
1 compromised version
- Jun 25, 2024
Malicious code in everything-everywhere-all-at-once-2022-online-free-fullmovies-on-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eureka2-write-ui (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eu.tsystems.mms.tic.testframework.pageobjects.page (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests.playgroundtests (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.annotation.azuretest (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eu.tsystems.mms.tic.testerra.bup (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eu.netherlands3d.gltfast (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ethersproject (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in eth-chai (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eslint-plugin-zammad (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in eslint-plugin-shein-soc-raw (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in eslint-plugin-plentific (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in eslint-plugin-datadog (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in eslint-plugin-cdp-project (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in eslint-disable-line (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in eslint-config-weblint (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eslint-config-vdkweb (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in eslint-config-promo (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in eslint-config-lf-eslint (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eslint-config-distribution (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in eslint-config-bsee (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eslint-config-bayzat (npm)
1 compromised version
- Jun 25, 2024
Malicious code in es7.symbol.async-iterator (npm)
1 compromised version
- Jun 25, 2024
Malicious code in es7.object.get-own-property-descriptors (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in epic-lit-media-query (npm)
7 compromised versions
- Jun 25, 2024
Malicious code in epc-teste-lykos (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in epc-staticpages-web (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in epc-onboarding-web (npm)
1 compromised version
- Jun 25, 2024
Malicious code in epc-menu-header-poc (npm)
1 compromised version
- Jun 25, 2024
Malicious code in epc-core-error-handling (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in eos-react-components (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in en-node-gyp-build (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in en-features-rollout (npm)
1 compromised version
- Jun 25, 2024
Malicious code in en-conduit-electron-worker (npm)
1 compromised version
- Jun 25, 2024
Malicious code in en-conduit-electron-renderer (npm)
1 compromised version
- Jun 25, 2024
Malicious code in en-conduit-electron-auth (npm)
1 compromised version
- Jun 25, 2024
Malicious code in en-conduit-electron (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ember-nf-graph-examples (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in ember-addon-cache-util (npm)
1 compromised version
- Jun 25, 2024
Malicious code in embeddingdistributorlocal (npm)
1 compromised version
- Jun 25, 2024
Malicious code in electron-meeting-sdk-test (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in egstore-suspense (npm)
1 compromised version
Page 6192 of 6,646