Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,178 total · sorted newest first- Aug 14, 2025
Malicious code in epigenetics-procyon-pm2-magnetar (npm)
- Aug 14, 2025
Malicious code in epigenetics-filament-speleology-pegasus (npm)
- Aug 14, 2025
Malicious code in epigenetics-dactyl-cressida-equinox (npm)
- Aug 14, 2025
Malicious code in epigenetics-centauri-lacerta-primatology (npm)
- Aug 14, 2025
Malicious code in epicgamesfooterprops (npm)
- Aug 14, 2025
Malicious code in epicgames-freebies-claimer (npm)
- Aug 14, 2025
Malicious code in epicdice (npm)
- Aug 14, 2025
Malicious code in epic-launcher-integration (npm)
105 compromised versions
- Aug 14, 2025
Malicious code in epic-client (npm)
- Aug 14, 2025
Malicious code in epic-auth (npm)
- Aug 14, 2025
Malicious code in epibot (npm)
- Aug 14, 2025
Malicious code in epgdata (npm)
- Aug 14, 2025
Malicious code in epfamvir (npm)
- Aug 14, 2025
Malicious code in epectron (npm)
- Aug 14, 2025
Malicious code in epdesigns (npm)
- Aug 14, 2025
Malicious code in eotyacvmbnzijgpd (npm)
- Aug 14, 2025
Malicious code in eosio-toppings (npm)
- Aug 14, 2025
Malicious code in eosio-reference-chrome-extension-authenticator-app (npm)
- Aug 14, 2025
Malicious code in eos-transfers (npm)
- Aug 14, 2025
Malicious code in eombfe (npm)
- Aug 14, 2025
Malicious code in eolectron (npm)
- Aug 14, 2025
Malicious code in eoectron (npm)
- Aug 14, 2025
Malicious code in enyomaton (npm)
- Aug 14, 2025
Malicious code in enwrite (npm)
- Aug 14, 2025
Malicious code in environment-inc (npm)
- Aug 14, 2025
Malicious code in enviromap (npm)
- Aug 14, 2025
Malicious code in envconfig-grunt-apex-canopus (npm)
- Aug 14, 2025
Malicious code in envconfig-deimos-astro-test (npm)
- Aug 14, 2025
Malicious code in envconfig-cross-env-ariel-enceladus (npm)
- Aug 14, 2025
Malicious code in envconfig-borealis-io-typeorm (npm)
- Aug 14, 2025
Malicious code in envbang (npm)
- Aug 14, 2025
Malicious code in env-variables-extension (npm)
- Aug 14, 2025
Malicious code in enum-sigma-test-double-container (npm)
- Aug 14, 2025
Malicious code in enum-beta-java-double-encrypt (npm)
- Aug 14, 2025
Malicious code in entrypoint-paypal (npm)
- Aug 14, 2025
Malicious code in entjava (npm)
- Aug 14, 2025
Malicious code in entertrep (npm)
- Aug 14, 2025
Malicious code in enterprise_script_service (npm)
- Aug 14, 2025
Malicious code in enterprise-dashboard-frontend.regex-builder-service (npm)
- Aug 14, 2025
Malicious code in entenji (npm)
- Aug 14, 2025
Malicious code in entanglement-stratosphere-titan-nucleosynthesis (npm)
- Aug 14, 2025
Malicious code in ensiname (npm)
- Aug 14, 2025
Malicious code in ensembl (npm)
- Aug 14, 2025
Malicious code in enrrabada (npm)
- Aug 14, 2025
Malicious code in enqrypt (npm)
- Aug 14, 2025
Malicious code in enogex (npm)
- Aug 14, 2025
Malicious code in enneagram (npm)
- Aug 14, 2025
Malicious code in enlink-barrenos-leo (npm)
- Aug 14, 2025
Malicious code in enkicli (npm)
- Aug 14, 2025
Malicious code in enif-version-exec-oauth (npm)
Page 6058 of 7,324