Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in eslintplunginimpwrt (npm)
- Aug 19, 2022
Malicious code in eslintplugnnvue (npm)
- Aug 19, 2022
Malicious code in eslintpluginsxa11y (npm)
- Aug 19, 2022
Malicious code in eslintpluginstanda4rd (npm)
- Aug 19, 2022
Malicious code in eslintpluginr6act (npm)
- Aug 19, 2022
Malicious code in eslintplugiinflowtype (npm)
- Aug 19, 2022
Malicious code in eslintpl5ijginnode (npm)
- Aug 19, 2022
Malicious code in eslintocnfigairnbbase (npm)
- Aug 19, 2022
Malicious code in eslintmconfig3prettier (npm)
- Aug 19, 2022
Malicious code in eslintcozfgreactapp (npm)
- Aug 19, 2022
Malicious code in eslintconfigiarbnb (npm)
- Aug 19, 2022
Malicious code in eslintcconfigstahndard (npm)
- Aug 19, 2022
Malicious code in esintpluginreacthooks (npm)
- Aug 19, 2022
Malicious code in escapestrifngregexp (npm)
- Aug 19, 2022
Malicious code in es6shsm (npm)
- Aug 19, 2022
Malicious code in es68prumise (npm)
- Aug 19, 2022
Malicious code in erserwebpackplugin (npm)
- Aug 19, 2022
Malicious code in emberclihtmcbars (npm)
- Aug 19, 2022
Malware in fjle4ize
1 compromised version
- Aug 19, 2022
Malware in eslintplugnnvue
1 compromised version
- Aug 19, 2022
Malware in ethereumjstox
1 compromised version
- Aug 19, 2022
Malware in extracttextwrebpackplugin
1 compromised version
- Aug 19, 2022
Malware in ethereumjstil
1 compromised version
- Aug 19, 2022
Malware in feslintpquginbakel
1 compromised version
- Aug 19, 2022
Malware in fidurel
1 compromised version
- Aug 19, 2022
Malware in estwatchtypaehead
1 compromised version
- Aug 19, 2022
Malware in fastg0b
1 compromised version
- Aug 19, 2022
Malware in euirejs
1 compromised version
- Aug 19, 2022
Malware in eslintmconfig3prettier
1 compromised version
- Aug 19, 2022
Malware in forktscheckerwebpajwkplugi
1 compromised version
- Aug 19, 2022
Malware in finauhaoler
1 compromised version
- Aug 19, 2022
Malware in followredirect3
1 compromised version
- Aug 19, 2022
Malware in fuesjo
1 compromised version
- Aug 19, 2022
Malware in funiquerandobmaoray
1 compromised version
- Aug 19, 2022
Malware in erserwebpackplugin
1 compromised version
- Aug 19, 2022
Malware in eslintplunginimpwrt
1 compromised version
- Aug 19, 2022
Malware in forktscheckerwebackplugiwnalt
1 compromised version
- Aug 19, 2022
Malware in eslintpl5ijginnode
1 compromised version
- Aug 19, 2022
Malware in eslintconfigiarbnb
1 compromised version
- Aug 19, 2022
Malware in fanc6og
1 compromised version
- Aug 19, 2022
Malware in eslintplugiinflowtype
1 compromised version
- Aug 19, 2022
Malware in evelu
1 compromised version
- Aug 19, 2022
Malware in exsess
1 compromised version
- Aug 19, 2022
Malware in fluetffmpeg
1 compromised version
- Aug 19, 2022
Malware in extratazip
1 compromised version
- Aug 19, 2022
Malware in eslintocnfigairnbbase
1 compromised version
- Aug 19, 2022
Malware in feiendlyerrorswebpackplugin
1 compromised version
- Aug 19, 2022
Malware in eslintpluginstanda4rd
1 compromised version
- Aug 19, 2022
Malware in futf4
1 compromised version
- Aug 19, 2022
Malware in eslintpluginr6act
1 compromised version
Page 6384 of 6,634