Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,178 total · sorted newest first- Aug 14, 2025
Malicious code in emerald-ofjfh-zlq5a-wisp-project (npm)
- Aug 14, 2025
Malicious code in emerald-oc235-69zgn-pinnacle-project (npm)
- Aug 14, 2025
Malicious code in emerald-myth-qog817-project (npm)
- Aug 14, 2025
Malicious code in emerald-mountain-tui290-project (npm)
- Aug 14, 2025
Malicious code in emerald-lagoon-hig728-project (npm)
- Aug 14, 2025
Malicious code in emerald-kelp-yye726-project (npm)
- Aug 14, 2025
Malicious code in emerald-jhthg-crleb-iceberg-project (npm)
- Aug 14, 2025
Malicious code in emerald-jasmine-smg556-project (npm)
- Aug 14, 2025
Malicious code in emerald-icicle-iyi553-project (npm)
- Aug 14, 2025
Malicious code in emerald-h89tc-5hoq6-opal-project (npm)
- Aug 14, 2025
Malicious code in emerald-glade-vmr298-project (npm)
- Aug 14, 2025
Malicious code in emerald-fcgxv-3upba-grove-project (npm)
- Aug 14, 2025
Malicious code in emerald-falcon-qto509-project (npm)
- Aug 14, 2025
Malicious code in emerald-dolphin-ixv293-project (npm)
- Aug 14, 2025
Malicious code in emerald-dandelion-cez160-project (npm)
- Aug 14, 2025
Malicious code in emerald-arctic-jhf013-project (npm)
- Aug 14, 2025
Malicious code in emehta (npm)
- Aug 14, 2025
Malicious code in emclaw (npm)
- Aug 14, 2025
Malicious code in emcitas (npm)
- Aug 14, 2025
Malicious code in embracegw (npm)
- Aug 14, 2025
Malicious code in embrace-wonder-bfq696-project (npm)
- Aug 14, 2025
Malicious code in embrace-uplift-dzx803-project (npm)
- Aug 14, 2025
Malicious code in embrace-inspire-wln181-project (npm)
- Aug 14, 2025
Malicious code in embercom-computed-properties (npm)
- Aug 14, 2025
Malicious code in ember_y79hn_7dwwd_raven (npm)
- Aug 14, 2025
Malicious code in ember_w4vz0_p4i1k_nectar (npm)
- Aug 14, 2025
Malicious code in ember_vytuq_arcrs_opaline (npm)
- Aug 14, 2025
Malicious code in ember_pt2ds_7qflu_fireworks (npm)
- Aug 14, 2025
Malicious code in ember_plspw_o0a2n_verdant (npm)
- Aug 14, 2025
Malicious code in ember_l12uw_mtim5_undertow (npm)
- Aug 14, 2025
Malicious code in ember_gqqxv_6hbod_saffron (npm)
- Aug 14, 2025
Malicious code in ember_ekfkf_9u60d_xenolith (npm)
- Aug 14, 2025
Malicious code in ember_ei2gg_pqrhn_wander (npm)
- Aug 14, 2025
Malicious code in ember_cli_babe (npm)
- Aug 14, 2025
Malicious code in ember_6kahf_nek3d_realm (npm)
- Aug 14, 2025
Malicious code in ember-zx09a-pzp1c-oracle-project (npm)
- Aug 14, 2025
Malicious code in ember-yg979-tlq9h-haven-project (npm)
- Aug 14, 2025
Malicious code in ember-x2dls-1ovc2-harmony-project (npm)
- Aug 14, 2025
Malicious code in ember-tm7wc-1sinr-celestial-project (npm)
- Aug 14, 2025
Malicious code in ember-testing (npm)
- Aug 14, 2025
Malicious code in ember-somx2-oysio-zephyr-project (npm)
- Aug 14, 2025
Malicious code in ember-qt0xk-mw6hu-glow-project (npm)
- Aug 14, 2025
Malicious code in ember-qs6jb-mj6qk-serenity-project (npm)
- Aug 14, 2025
Malicious code in ember-pvd7i-encu7-yarn-project (npm)
- Aug 14, 2025
Malicious code in ember-pt-components (npm)
- Aug 14, 2025
Malicious code in ember-production-deprecations (npm)
- Aug 14, 2025
Malicious code in ember-normalize-url-shim (npm)
- Aug 14, 2025
Malicious code in ember-module-migration (npm)
- Aug 14, 2025
Malicious code in ember-mfp-digest-display (npm)
- Aug 14, 2025
Malicious code in ember-i87hx-31r2h-keystone-project (npm)
Page 6060 of 7,324