Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in esl7ntplugfin-flowtype (npm)
- Aug 19, 2022
Malicious code in es9-prhmise (npm)
- Aug 19, 2022
Malicious code in es6shi (npm)
- Aug 19, 2022
Malicious code in es2int-pluginv-e (npm)
- Aug 19, 2022
Malicious code in es-int-pluginr-prettier (npm)
- Aug 19, 2022
Malicious code in eoman-dnvironment (npm)
- Aug 19, 2022
Malicious code in enthereumjsu-til (npm)
- Aug 19, 2022
Malicious code in enm (npm)
- Aug 19, 2022
Malicious code in elsint-plujin-no5e (npm)
- Aug 19, 2022
Malicious code in elfecteron (npm)
- Aug 19, 2022
Malicious code in efcdege (npm)
- Aug 19, 2022
Malicious code in edx-logger (npm)
- Aug 19, 2022
Malicious code in edbouce (npm)
- Aug 19, 2022
Malicious code in ect-mnotion (npm)
- Aug 19, 2022
Malicious code in eact-transdtion-grouw (npm)
- Aug 19, 2022
Malicious code in eact-routre (npm)
- Aug 19, 2022
Malicious code in dvodash.idsempty (npm)
- Aug 19, 2022
Malicious code in dsfcord.js (npm)
- Aug 19, 2022
Malicious code in dowloa (npm)
- Aug 19, 2022
Malicious code in dezameliwe (npm)
- Aug 19, 2022
Malicious code in detectpert (npm)
- Aug 19, 2022
Malicious code in deepemrge (npm)
- Aug 19, 2022
Malicious code in deep-edula (npm)
- Aug 19, 2022
Malicious code in deaysnc (npm)
- Aug 19, 2022
Malicious code in ddte-fdns (npm)
- Aug 19, 2022
Malicious code in datfeorma3 (npm)
- Aug 19, 2022
Malicious code in daeyjds (npm)
- Aug 19, 2022
Malicious code in d-sscale (npm)
- Aug 19, 2022
Malware in eslsh
1 compromised version
- Aug 19, 2022
Malware in fdig
1 compromised version
- Aug 19, 2022
Malware in esl7ntplugfin-flowtype
1 compromised version
- Aug 19, 2022
Malware in es-int-pluginr-prettier
1 compromised version
- Aug 19, 2022
Malware in detectpert
1 compromised version
- Aug 19, 2022
Malware in ewenl2mitter2
1 compromised version
- Aug 19, 2022
Malware in d-sscale
1 compromised version
- Aug 19, 2022
Malware in -d3-ushape
1 compromised version
- Aug 19, 2022
Malware in eslint-plguin-babel
1 compromised version
- Aug 19, 2022
Malware in elfecteron
1 compromised version
- Aug 19, 2022
Malware in es2int-pluginv-e
1 compromised version
- Aug 19, 2022
Malware in enm
1 compromised version
- Aug 19, 2022
Malware in dsfcord.js
1 compromised version
- Aug 19, 2022
Malware in daeyjds
1 compromised version
- Aug 19, 2022
Malware in deaysnc
1 compromised version
- Aug 19, 2022
Malware in datfeorma3
1 compromised version
- Aug 19, 2022
Malware in esyncvalidator
1 compromised version
- Aug 19, 2022
Malware in dezameliwe
1 compromised version
- Aug 19, 2022
Malware in deep-edula
1 compromised version
- Aug 19, 2022
Malware in ect-mnotion
1 compromised version
- Aug 19, 2022
Malware in eslint-plugin-reatc
1 compromised version
- Aug 19, 2022
Malware in eact-routre
1 compromised version
Page 6369 of 6,634