Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,178 total · sorted newest first- Aug 14, 2025
Malicious code in enif-markdown-pdf-mantle-boson (npm)
- Aug 14, 2025
Malicious code in enif-eclipse-markdown-pdf-phoebe (npm)
- Aug 14, 2025
Malicious code in enif-async-panspermia-mini-css-extract-plugin (npm)
- Aug 14, 2025
Malicious code in enif-apollo-janus-hermes (npm)
- Aug 14, 2025
Malicious code in english-time (npm)
- Aug 14, 2025
Malicious code in engility (npm)
- Aug 14, 2025
Malicious code in engage-builder-templates-react (npm)
- Aug 14, 2025
Malicious code in eng-101-solutions-test (npm)
- Aug 14, 2025
Malicious code in energycap-angular2 (npm)
- Aug 14, 2025
Malicious code in energyCalculator-browser (npm)
- Aug 14, 2025
Malicious code in energyai (npm)
- Aug 14, 2025
Malicious code in energized (npm)
- Aug 14, 2025
Malicious code in endocon (npm)
- Aug 14, 2025
Malicious code in endgame-ui-input-text (npm)
- Aug 14, 2025
Malicious code in endevver (npm)
- Aug 14, 2025
Malicious code in encryptedcookies-paypal (npm)
- Aug 14, 2025
Malicious code in encrypt-layout-helper (npm)
- Aug 14, 2025
Malicious code in encrypt-compile-signal-visualize-root (npm)
- Aug 14, 2025
Malicious code in encphrujdkvxobmg (npm)
- Aug 14, 2025
Malicious code in encodeco (npm)
- Aug 14, 2025
Malicious code in enb-tanker (npm)
- Aug 14, 2025
Malicious code in en.ephoto360.com (npm)
- Aug 14, 2025
Malicious code in emulate-slow-execute-try-small (npm)
- Aug 14, 2025
Malicious code in emulate-earth-socket-rain-epsilon (npm)
- Aug 14, 2025
Malicious code in emulate-cloud-sed-wind-public (npm)
- Aug 14, 2025
Malicious code in emulate-boolean-info-enum-chi (npm)
- Aug 14, 2025
Malicious code in emteor (npm)
- Aug 14, 2025
Malicious code in emswidget (npm)
- Aug 14, 2025
Malicious code in emredis (npm)
- Aug 14, 2025
Malicious code in emr-ccd (npm)
- Aug 14, 2025
Malicious code in emoji-configsource-facebook (npm)
- Aug 14, 2025
Malicious code in emoblite (npm)
- Aug 14, 2025
Malicious code in emmet-sketch (npm)
- Aug 14, 2025
Malicious code in emis-gojs (npm)
- Aug 14, 2025
Malicious code in emilerl (npm)
- Aug 14, 2025
Malicious code in emgucv (npm)
- Aug 14, 2025
Malicious code in emgrid1 (npm)
- Aug 14, 2025
Malicious code in emgrid (npm)
- Aug 14, 2025
Malicious code in emerald-zenith-exj165-project (npm)
- Aug 14, 2025
Malicious code in emerald-xylophone-ymr222-project (npm)
- Aug 14, 2025
Malicious code in emerald-xylophone-xnv590-project (npm)
- Aug 14, 2025
Malicious code in emerald-xylophone-xkz384-project (npm)
- Aug 14, 2025
Malicious code in emerald-xerox-ksk428-project (npm)
- Aug 14, 2025
Malicious code in emerald-whale-vlj337-project (npm)
- Aug 14, 2025
Malicious code in emerald-vulture-ywp144-project (npm)
- Aug 14, 2025
Malicious code in emerald-violet-cgb614-project (npm)
- Aug 14, 2025
Malicious code in emerald-v5nct-6ad1h-moonlight-project (npm)
- Aug 14, 2025
Malicious code in emerald-pcoah-t9967-xylophone-project (npm)
- Aug 14, 2025
Malicious code in emerald-orchid-wys258-project (npm)
- Aug 14, 2025
Malicious code in emerald-opal-pjs139-project (npm)
Page 6059 of 7,324