Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,355 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @leaffm/test_faisal (npm)
- Aug 14, 2025
Malicious code in @leaffm/test-erlangga-profile1 (npm)
- Aug 14, 2025
Malicious code in @leaffm/test-erlangga (npm)
- Aug 14, 2025
Malicious code in @leaffm/sce-leaf-connect (npm)
- Aug 14, 2025
Malicious code in @leaffm/leafconnect-simon-sinek (npm)
- Aug 14, 2025
Malicious code in @leaffm/leafconnect-lgs (npm)
- Aug 14, 2025
Malicious code in @leaffm/leafconnect-ginilondon (npm)
- Aug 14, 2025
Malicious code in @leaffm/leafconnect-datalayer (npm)
- Aug 14, 2025
Malicious code in @leaffm/leafconnect-cr (npm)
- Aug 14, 2025
Malicious code in @leaffm/leafconnect-cms (npm)
- Aug 14, 2025
Malicious code in @leaffm/leafconnect-brookeandwilde (npm)
- Aug 14, 2025
Malicious code in @leaffm/leafconnect-b2b-simon-sinek (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-undefined (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-thrudark (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-the-little-green-sheep (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-testingthis134 (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-testing12345678 (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-test (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-stubble-and-co (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-snuz (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-ringtons (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-remi-cachet (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-podur (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-novomins (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-naturisimo13 (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-naturisimo (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-nailevate (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-lumie (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-lauren_test (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-lauren-p-store (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-indu-dev-store (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-groundtruth (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-grafana (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-google-test12 (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-google-test (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-gatineau (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-elle-sera (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-dev97thvintage (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-cr (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-bunty-pets (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-bullybillows-uk (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-bully-billows-eu (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-bibado12 (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-bibado (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-asda (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-aligne (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-al (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-additional-lengths (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-97thvintage (npm)
- Aug 14, 2025
Malicious code in @leaffm/leaf-connect-97th-vintage (npm)
Page 5171 of 6,668