Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,178 total · sorted newest first- Aug 14, 2025
Malicious code in elephat (npm)
- Aug 14, 2025
Malicious code in elephant_zxh2e_243yp_yew (npm)
- Aug 14, 2025
Malicious code in elephant_vngzh_f7e2j_zen (npm)
- Aug 14, 2025
Malicious code in elephant_gticy_l87eu_joy (npm)
- Aug 14, 2025
Malicious code in elephant_f5sl7_t8an9_karma (npm)
- Aug 14, 2025
Malicious code in elephant_ba2j9_i59yd_nectar (npm)
- Aug 14, 2025
Malicious code in elephant-volcano-nql628-project (npm)
- Aug 14, 2025
Malicious code in elephant-underpass-3w01 (npm)
- Aug 14, 2025
Malicious code in elephant-star-cjj155-project (npm)
- Aug 14, 2025
Malicious code in elephant-sapphire-fkd242-project (npm)
- Aug 14, 2025
Malicious code in elephant-rainbow-bpk2 (npm)
- Aug 14, 2025
Malicious code in elephant-quill-kit950-project (npm)
- Aug 14, 2025
Malicious code in elephant-pinnacle-zlv877-project (npm)
- Aug 14, 2025
Malicious code in elephant-pier-xs00 (npm)
- Aug 14, 2025
Malicious code in elephant-opal-xhs761-project (npm)
- Aug 14, 2025
Malicious code in elephant-opal-jah971-project (npm)
- Aug 14, 2025
Malicious code in elephant-juniper-87xw (npm)
- Aug 14, 2025
Malicious code in elephant-jellyfish-rss341-project (npm)
- Aug 14, 2025
Malicious code in elephant-iceberg-snk593-project (npm)
- Aug 14, 2025
Malicious code in elephant-iceberg-fr0u (npm)
- Aug 14, 2025
Malicious code in elephant-glacier-xsc711-project (npm)
- Aug 14, 2025
Malicious code in elephant-emerald-mjq314-project (npm)
- Aug 14, 2025
Malicious code in elementory-g-backend (npm)
- Aug 14, 2025
Malicious code in element-ui-rate-limiter-archaeogenetics-prosthetics (npm)
- Aug 14, 2025
Malicious code in element-ui-changelog-winston-nodemon (npm)
- Aug 14, 2025
Malicious code in element-ui-apollo-gatsby-process (npm)
- Aug 14, 2025
Malicious code in eleme-pay-sdk (npm)
- Aug 14, 2025
Malicious code in elektra-telesto-magnetosphere-perseus (npm)
- Aug 14, 2025
Malicious code in elektra-grus-cassini-postcss-loader (npm)
- Aug 14, 2025
Malicious code in elektra-entanglement-gulp-init (npm)
- Aug 14, 2025
Malicious code in elektra-corvus-aurora-octans (npm)
- Aug 14, 2025
Malicious code in eleftron (npm)
- Aug 14, 2025
Malicious code in elefran (npm)
- Aug 14, 2025
Malicious code in elefctron (npm)
- Aug 14, 2025
Malicious code in eleectron (npm)
- Aug 14, 2025
Malicious code in eledtron (npm)
- Aug 14, 2025
Malicious code in eledctron (npm)
- Aug 14, 2025
Malicious code in elecytron (npm)
- Aug 14, 2025
Malicious code in elecyron (npm)
- Aug 14, 2025
Malicious code in elecxtron (npm)
- Aug 14, 2025
Malicious code in elecvtron (npm)
- Aug 14, 2025
Malicious code in electyron (npm)
- Aug 14, 2025
Malicious code in electtron (npm)
- Aug 14, 2025
Malicious code in electton (npm)
- Aug 14, 2025
Malicious code in electrton (npm)
- Aug 14, 2025
Malicious code in electrron (npm)
- Aug 14, 2025
Malicious code in electrpon (npm)
- Aug 14, 2025
Malicious code in electrpn (npm)
- Aug 14, 2025
Malicious code in electropn (npm)
- Aug 14, 2025
Malicious code in electroon (npm)
Page 6062 of 7,324