Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,176 total · sorted newest first- Aug 14, 2025
Malicious code in elasticsearch-product-search-builder (npm)
- Aug 14, 2025
Malicious code in elasticsearch-collections-client (npm)
- Aug 14, 2025
Malicious code in elara-loglevel-cressida-auth0 (npm)
- Aug 14, 2025
Malicious code in elara-eventhoriz-nightwatch-exec (npm)
- Aug 14, 2025
Malicious code in elabstest (npm)
- Aug 14, 2025
Malicious code in el4ectron (npm)
- Aug 14, 2025
Malicious code in el4ctron (npm)
- Aug 14, 2025
Malicious code in el3ectron (npm)
- Aug 14, 2025
Malicious code in el3ctron (npm)
- Aug 14, 2025
Malicious code in ekvhatmpfnzyrxdj (npm)
- Aug 14, 2025
Malicious code in eksi-server (npm)
- Aug 14, 2025
Malicious code in eko-tempe81-sukiwir (npm)
- Aug 14, 2025
Malicious code in eko-tempe26-breki (npm)
- Aug 14, 2025
Malicious code in eko-lapis68-kuki (npm)
- Aug 14, 2025
Malicious code in ekmoxrhnckljfdbp (npm)
- Aug 14, 2025
Malicious code in eklogger (npm)
- Aug 14, 2025
Malicious code in eklectron (npm)
- Aug 14, 2025
Malicious code in ekinrt (npm)
- Aug 14, 2025
Malicious code in ekectron (npm)
- Aug 14, 2025
Malicious code in ekameno (npm)
- Aug 14, 2025
Malicious code in eka-nasiuduk68-kuki (npm)
- Aug 14, 2025
Malicious code in eka-martabak89-breki (npm)
- Aug 14, 2025
Malicious code in eka-martabak4-breki (npm)
- Aug 14, 2025
Malicious code in eka-getuk2-kuki (npm)
- Aug 14, 2025
Malicious code in eka-dradag43-kuki (npm)
- Aug 14, 2025
Malicious code in eka-asinan10-breki (npm)
- Aug 14, 2025
Malicious code in ejungle (npm)
- Aug 14, 2025
Malicious code in ejstags (npm)
- Aug 14, 2025
Malicious code in ejson2env (npm)
- Aug 14, 2025
Malicious code in ejson-rails (npm)
- Aug 14, 2025
Malicious code in ejs-client (npm)
- Aug 14, 2025
Malicious code in ejrfsqmkdconukbl (npm)
- Aug 14, 2025
Malicious code in ejercico (npm)
- Aug 14, 2025
Malicious code in ejdgrvaqkioslhbf (npm)
- Aug 14, 2025
Malicious code in eivybsafunmzpxlg (npm)
- Aug 14, 2025
Malicious code in eip-119-json-provider (npm)
- Aug 14, 2025
Malicious code in einkaufen (npm)
- Aug 14, 2025
Malicious code in einfprog (npm)
- Aug 14, 2025
Malicious code in ein-services (npm)
- Aug 14, 2025
Malicious code in ein-loader (npm)
- Aug 14, 2025
Malicious code in eikpndvxbtfhkcas (npm)
- Aug 14, 2025
Malicious code in eikasia (npm)
- Aug 14, 2025
Malicious code in eigenstate-test-technocracy-javascript (npm)
- Aug 14, 2025
Malicious code in eigenstate-bionics-alphard-hermes (npm)
- Aug 14, 2025
Malicious code in ehxjimturwyqnzbk (npm)
- Aug 14, 2025
Malicious code in ehquvdznyglmrpxb (npm)
- Aug 14, 2025
Malicious code in ehouse (npm)
- Aug 14, 2025
Malicious code in eh-fiddle (npm)
- Aug 14, 2025
Malicious code in egudkjkpcrwhlfvy (npm)
- Aug 14, 2025
Malicious code in egrader (npm)
Page 6066 of 7,324