Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,178 total · sorted newest first- Aug 14, 2025
Malicious code in experss (npm)
- Aug 14, 2025
Malicious code in experimentation-paypal (npm)
- Aug 14, 2025
Malicious code in expectant (npm)
- Aug 14, 2025
Malicious code in expatblog (npm)
- Aug 14, 2025
Malicious code in exosphere-figures-deimos-pavo (npm)
- Aug 14, 2025
Malicious code in exoplanetology-postcss-loader-local-quantum-computing (npm)
- Aug 14, 2025
Malicious code in exoplanetology-package-config-aldebaran (npm)
- Aug 14, 2025
Malicious code in exoplanetology-extremophile-html-webpack-plugin-webdriver-mocha (npm)
- Aug 14, 2025
Malicious code in exoplanetology-australis-colors-comet (npm)
- Aug 14, 2025
Malicious code in exoplanet-webdriverio-archaeoastronomy-lynx (npm)
- Aug 14, 2025
Malicious code in exoplanet-pulsar-antares-miranda (npm)
- Aug 14, 2025
Malicious code in exoplanet-hexo-sagitta-auth0 (npm)
- Aug 14, 2025
Malicious code in exobiology-pegasus-virtualreality-writable (npm)
- Aug 14, 2025
Malicious code in exobiology-axios-cryovolcano-spinner (npm)
- Aug 14, 2025
Malicious code in exmodel (npm)
- Aug 14, 2025
Malicious code in exmo_api_lib_demo (npm)
- Aug 14, 2025
Malicious code in existdb (npm)
- Aug 14, 2025
Malicious code in exercise-evaluation (npm)
- Aug 14, 2025
Malicious code in exec-thuban-australis-slidev (npm)
- Aug 14, 2025
Malicious code in exec-mineralogy-command-nightwatch (npm)
- Aug 14, 2025
Malicious code in exec-less-request-cosmicweb (npm)
- Aug 14, 2025
Malicious code in exec-concurrently-run-script-pm2 (npm)
- Aug 14, 2025
Malicious code in exdataana (npm)
- Aug 14, 2025
Malicious code in exchange-rate-reporter (npm)
- Aug 14, 2025
Malicious code in excel-data-exporter (npm)
- Aug 14, 2025
Malicious code in exas (npm)
- Aug 14, 2025
Malicious code in exapp (npm)
- Aug 14, 2025
Malicious code in example-maliciou (npm)
- Aug 14, 2025
Malicious code in example-ethers-v4 (npm)
- Aug 14, 2025
Malicious code in example-backend-next (npm)
- Aug 14, 2025
Malicious code in examplary (npm)
- Aug 14, 2025
Malicious code in examfirst (npm)
- Aug 14, 2025
Malicious code in exam-service (npm)
- Aug 14, 2025
Malicious code in exagfynprdbouihw (npm)
- Aug 14, 2025
Malicious code in ewlectron (npm)
- Aug 14, 2025
Malicious code in ewalena (npm)
- Aug 14, 2025
Malicious code in ew0nfx (npm)
- Aug 14, 2025
Malicious code in evvnt-submission-form-angular (npm)
- Aug 14, 2025
Malicious code in evusau (npm)
- Aug 14, 2025
Malicious code in evuilgapkczwsorj (npm)
- Aug 14, 2025
Malicious code in evtiyugznposamqw (npm)
- Aug 14, 2025
Malicious code in evs-livepam-ui (npm)
- Aug 14, 2025
Malicious code in evony-resources-hack883 (npm)
- Aug 14, 2025
Malicious code in evony-resources-hack844 (npm)
- Aug 14, 2025
Malicious code in evony-resources-hack809 (npm)
- Aug 14, 2025
Malicious code in evony-resources-hack691 (npm)
- Aug 14, 2025
Malicious code in evony-resources-hack662 (npm)
- Aug 14, 2025
Malicious code in evony-resources-hack513 (npm)
- Aug 14, 2025
Malicious code in evony-resources-hack415 (npm)
- Aug 14, 2025
Malicious code in evony-resources-hack390 (npm)
Page 6051 of 7,324