Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,178 total · sorted newest first- Aug 14, 2025
Malicious code in europa-ora-exosphere-norma (npm)
- Aug 14, 2025
Malicious code in europa-indus-puppeteer-polaris (npm)
- Aug 14, 2025
Malicious code in europa-hugo-spectron-foundation-chalk-server (npm)
- Aug 14, 2025
Malicious code in europa-fornax-fomalhaut-config (npm)
- Aug 14, 2025
Malicious code in europa-express-development-luminescence (npm)
- Aug 14, 2025
Malicious code in euromedia-gulp (npm)
- Aug 14, 2025
Malicious code in euogctiabnwpskjx (npm)
- Aug 14, 2025
Malicious code in eulogy (npm)
- Aug 14, 2025
Malicious code in eui-react-scripts (npm)
- Aug 14, 2025
Malicious code in euclides (npm)
- Aug 14, 2025
Malicious code in eu.fairmanager.mobile (npm)
- Aug 14, 2025
Malicious code in etymonline (npm)
- Aug 14, 2025
Malicious code in etwitty (npm)
- Aug 14, 2025
Malicious code in etplugin (npm)
- Aug 14, 2025
Malicious code in etltools (npm)
- Aug 14, 2025
Malicious code in ethology-sedimentology-geoarchaeology-geomorphology (npm)
- Aug 14, 2025
Malicious code in ethology-bootes-dotenv-safe-xerxes (npm)
- Aug 14, 2025
Malicious code in ethers-util.js (npm)
- Aug 14, 2025
Malicious code in ethers-util (npm)
- Aug 14, 2025
Malicious code in etherres (npm)
1 compromised version
- Aug 14, 2025
Malicious code in ethermega (npm)
- Aug 14, 2025
Malicious code in ethan-prime-time (npm)
- Aug 14, 2025
Malicious code in eth_private_key_to_address (npm)
- Aug 14, 2025
Malicious code in etdpqayjnkhvfkzi (npm)
- Aug 14, 2025
Malicious code in etch-in-stone (npm)
- Aug 14, 2025
Malicious code in etcdrepl (npm)
- Aug 14, 2025
Malicious code in eta-xml-wind-parse-cron (npm)
- Aug 14, 2025
Malicious code in eta-reject-fork-char-cat (npm)
- Aug 14, 2025
Malicious code in eta-chi-socket-easy-module (npm)
- Aug 14, 2025
Malicious code in eswyoivnamrkuftd (npm)
- Aug 14, 2025
Malicious code in estudoweb (npm)
- Aug 14, 2025
Malicious code in estroids (npm)
- Aug 14, 2025
Malicious code in estosneu1 (npm)
- Aug 14, 2025
Malicious code in essence-qdi4e-o5akm-jungle-project (npm)
- Aug 14, 2025
Malicious code in essence-hlqjl-6drw8-aurora-project (npm)
- Aug 14, 2025
Malicious code in essence-gr20e-klty5-opal-project (npm)
- Aug 14, 2025
Malicious code in essence-dszwm-d3xs1-cascade-project (npm)
- Aug 14, 2025
Malicious code in essence-dbif3-g4ce3-twilight-project (npm)
- Aug 14, 2025
Malicious code in essence-2eyt7-ftz97-verdant-project (npm)
- Aug 14, 2025
Malicious code in essence-18y8m-i7gf5-yellow-project (npm)
- Aug 14, 2025
Malicious code in esselin (npm)
- Aug 14, 2025
Malicious code in esri (npm)
- Aug 14, 2025
Malicious code in esprime (npm)
- Aug 14, 2025
Malicious code in esovtaj (npm)
- Aug 14, 2025
Malicious code in esolutions-ui-framework (npm)
- Aug 14, 2025
Malicious code in eslint-virtru-lint (npm)
- Aug 14, 2025
Malicious code in eslint-plugin-virtru-lint (npm)
- Aug 14, 2025
Malicious code in eslint-plugin-spectrum-web-components (npm)
- Aug 14, 2025
Malicious code in eslint-plugin-restart-vega-soap (npm)
- Aug 14, 2025
Malicious code in eslint-plugin-relay-internal (npm)
Page 6054 of 7,324