Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in lyrzxntqpkuvdagc (npm)
- Aug 14, 2025
Malicious code in lyra-oortcloud-spectron-await (npm)
- Aug 14, 2025
Malicious code in lyra-membrane-paleoanthropology-vega (npm)
- Aug 14, 2025
Malicious code in lyonverre (npm)
- Aug 14, 2025
Malicious code in lynx3 (npm)
- Aug 14, 2025
Malicious code in lynx-superflare-bunyan-sedna (npm)
- Aug 14, 2025
Malicious code in lynx-geochemistry-webdriver-manager-chariklo (npm)
- Aug 14, 2025
Malicious code in lynx-exosphere-elektra-prettier-stylelint (npm)
- Aug 14, 2025
Malicious code in lynx-elara-antd-nodejs (npm)
- Aug 14, 2025
Malicious code in lynx-blackhole-typeorm-umbriel (npm)
- Aug 14, 2025
Malicious code in lyftkube (npm)
- Aug 14, 2025
Malicious code in lyft-web-button (npm)
- Aug 14, 2025
Malicious code in lyft-dataset-sdk (npm)
- Aug 14, 2025
Malicious code in lyft-coloralgorithm (npm)
- Aug 14, 2025
Malicious code in lxwwxdeve (npm)
- Aug 14, 2025
Malicious code in lxcstack (npm)
- Aug 14, 2025
Malicious code in lwjglgame (npm)
- Aug 14, 2025
Malicious code in lwc-components-lightning (npm)
- Aug 14, 2025
Malicious code in lvmeter (npm)
- Aug 14, 2025
Malicious code in lvguanjia (npm)
- Aug 14, 2025
Malicious code in lvaoepwuxithkkrc (npm)
- Aug 14, 2025
Malicious code in luzyvida (npm)
- Aug 14, 2025
Malicious code in lutfi-rangi27-sukiwir (npm)
- Aug 14, 2025
Malicious code in lutfi-peyek32-breki (npm)
- Aug 14, 2025
Malicious code in lutachu (npm)
- Aug 14, 2025
Malicious code in luster-ext-env (npm)
- Aug 14, 2025
Malicious code in luster-ctrl (npm)
- Aug 14, 2025
Malicious code in lurk-the-chats (npm)
- Aug 14, 2025
Malicious code in lupinistestingsomethingnewonnpmagain3 (npm)
- Aug 14, 2025
Malicious code in lupinistestingsomethingnewonnpmagain (npm)
- Aug 14, 2025
Malicious code in lupinistestinganotherpackage (npm)
- Aug 14, 2025
Malicious code in luotsi (npm)
- Aug 14, 2025
Malicious code in luntbuild (npm)
- Aug 14, 2025
Malicious code in lunoine7 (npm)
- Aug 14, 2025
Malicious code in lunchat (npm)
- Aug 14, 2025
Malicious code in lunarized (npm)
- Aug 14, 2025
Malicious code in lunarcrush.com (npm)
- Aug 14, 2025
Malicious code in lunar_pjibk_mssbn_karma (npm)
- Aug 14, 2025
Malicious code in lunar_gqxqw_j18kd_dawn (npm)
- Aug 14, 2025
Malicious code in lunar-zenith-xl9x (npm)
- Aug 14, 2025
Malicious code in lunar-zamia-b0qf (npm)
- Aug 14, 2025
Malicious code in lunar-ysdya-qpxo9-terra-project (npm)
- Aug 14, 2025
Malicious code in lunar-yam-3j90 (npm)
- Aug 14, 2025
Malicious code in lunar-yacht-qzrj (npm)
- Aug 14, 2025
Malicious code in lunar-void-142h (npm)
- Aug 14, 2025
Malicious code in lunar-rh3rt-60yk8-zen-project (npm)
- Aug 14, 2025
Malicious code in lunar-raspberry-7soq (npm)
- Aug 14, 2025
Malicious code in lunar-mountain-xlxk (npm)
- Aug 14, 2025
Malicious code in lunar-india-4k0o (npm)
- Aug 14, 2025
Malicious code in lunar-gs6x8-5u52d-keystone-project (npm)
Page 5477 of 6,634