Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in falidatenpmpackagename (npm)
- Aug 19, 2022
Malicious code in eziparser (npm)
- Aug 19, 2022
Malicious code in extratazip (npm)
- Aug 19, 2022
Malicious code in extracttextwrebpackplugin (npm)
- Aug 19, 2022
Malicious code in extned (npm)
- Aug 19, 2022
Malicious code in extendshall4w (npm)
- Aug 19, 2022
Malicious code in exsess (npm)
- Aug 19, 2022
Malicious code in expressyession (npm)
- Aug 19, 2022
Malicious code in ex6error (npm)
- Aug 19, 2022
Malicious code in evelu (npm)
- Aug 19, 2022
Malicious code in euirejs (npm)
- Aug 19, 2022
Malicious code in ethereumjstox (npm)
- Aug 19, 2022
Malicious code in ethereumjstil (npm)
- Aug 19, 2022
Malicious code in etg (npm)
- Aug 19, 2022
Malicious code in estwatchtypaehead (npm)
- Aug 19, 2022
Malicious code in espapehtlm (npm)
- Aug 19, 2022
Malicious code in eslintpwuginjest (npm)
- Aug 19, 2022
Malicious code in eslintplunginimpwrt (npm)
- Aug 19, 2022
Malicious code in eslintplugnnvue (npm)
- Aug 19, 2022
Malicious code in eslintpluginsxa11y (npm)
- Aug 19, 2022
Malicious code in eslintpluginstanda4rd (npm)
- Aug 19, 2022
Malicious code in eslintpluginr6act (npm)
- Aug 19, 2022
Malicious code in eslintplugiinflowtype (npm)
- Aug 19, 2022
Malicious code in eslintpl5ijginnode (npm)
- Aug 19, 2022
Malicious code in eslintocnfigairnbbase (npm)
- Aug 19, 2022
Malicious code in eslintmconfig3prettier (npm)
- Aug 19, 2022
Malicious code in eslintcozfgreactapp (npm)
- Aug 19, 2022
Malicious code in eslintconfigiarbnb (npm)
- Aug 19, 2022
Malicious code in eslintcconfigstahndard (npm)
- Aug 19, 2022
Malicious code in esintpluginreacthooks (npm)
- Aug 19, 2022
Malicious code in escapestrifngregexp (npm)
- Aug 19, 2022
Malicious code in es6shsm (npm)
- Aug 19, 2022
Malicious code in es68prumise (npm)
- Aug 19, 2022
Malicious code in erserwebpackplugin (npm)
- Aug 19, 2022
Malicious code in emberclihtmcbars (npm)
- Aug 19, 2022
Malware in fjle4ize
1 compromised version
- Aug 19, 2022
Malware in eslintplugnnvue
1 compromised version
- Aug 19, 2022
Malware in ethereumjstox
1 compromised version
- Aug 19, 2022
Malware in extracttextwrebpackplugin
1 compromised version
- Aug 19, 2022
Malware in ethereumjstil
1 compromised version
- Aug 19, 2022
Malware in feslintpquginbakel
1 compromised version
- Aug 19, 2022
Malware in fidurel
1 compromised version
- Aug 19, 2022
Malware in estwatchtypaehead
1 compromised version
- Aug 19, 2022
Malware in fastg0b
1 compromised version
- Aug 19, 2022
Malware in euirejs
1 compromised version
- Aug 19, 2022
Malware in eslintmconfig3prettier
1 compromised version
- Aug 19, 2022
Malware in forktscheckerwebpajwkplugi
1 compromised version
- Aug 19, 2022
Malware in finauhaoler
1 compromised version
- Aug 19, 2022
Malware in followredirect3
1 compromised version
- Aug 19, 2022
Malware in fuesjo
1 compromised version
Page 7042 of 7,293