Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Jun 25, 2024
Malicious code in egstore-query (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in egstore-ctx (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in egs-trusted-domains (npm)
1 compromised version
- Jun 25, 2024
Malicious code in eg-affiliates-common-test (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in eg-affiliates-common (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in eeforemon (npm)
1 compromised version
- Jun 25, 2024
Malicious code in editor-languages (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in eckoplugin (npm)
1 compromised version
- Jun 25, 2024
Malicious code in echarts-www (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in echarts-website (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ecare-react (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in ebay-translation-react-widget-server (npm)
1 compromised version
- Jun 25, 2024
Malicious code in easyfetchgoogle (npm)
1 compromised version
- Jun 25, 2024
Malicious code in easier-clients (npm)
1 compromised version
- Jun 25, 2024
Malicious code in duxton-web (npm)
1 compromised version
- Jun 25, 2024
Malicious code in driverless-acquisition-blue-auth-token-validator (npm)
1 compromised version
- Jun 25, 2024
Malicious code in driver1-testingbluehk-01 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dreamhunt-google-nc-tc2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dreamhunt-google-nc-tc1 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dreamhunt-google-nc-tc-dc (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dreamhunt-google-nc-tc (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dreamhunt-google-nc (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dragonpulse-config (npm)
1 compromised version
- Jun 25, 2024
Malicious code in downloads-john-wick-chapter-4-fullmovies-online-from-homees (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_woman_of_the_year_aw6bj3 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_what_if_it_s_us_g1tr8f (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_to_have_and_to_heist_4x2rc7 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_year_of_magical_thinking_ubkt02 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_witch_and_the_vampire_ndjw8q (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_water_outlaws_qsz7bt (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_shadow_sister_3jrxsm (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_perfumist_of_paris_kidm70 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_other_side_of_night_iau440 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_neighbor_favor_dupa1y (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_mystery_at_dunvegan_castle_5o3xgv (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_mysterious_benedict_society_64h8qp (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_furrows_1tuh0z (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_dare_oflg5s (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_color_of_magic_1kl2my (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_chandler_legacies_ma6nco (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_the_bear_and_the_dragon_howm75 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_something_about_you_z9ty4k (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_some_mistakes_were_made_1f8ru9 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_sister_outsider_vi4s07 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_sex_at_dawn_qx8yc9 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_ruthless_fae_27s553 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_right_girl_wrong_side_ssut90 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_revelle_u6mxnz (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_painted_scars_ascgt8 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in down_load_epub_long_bright_river_dfxa7t (npm)
1 compromised version
Page 6193 of 6,646