Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in lunar-czft2-k4qqe-juniper-project (npm)
- Aug 14, 2025
Malicious code in lunar-cherry-9kak (npm)
- Aug 14, 2025
Malicious code in lunar-ce51f-xnk9a-yonder-project (npm)
- Aug 14, 2025
Malicious code in lunar-bw5wq-wquq3-thunder-project (npm)
- Aug 14, 2025
Malicious code in lunar-b55dp-hxcr6-yellow-project (npm)
- Aug 14, 2025
Malicious code in luna-sublimation-gacrux-sqlite (npm)
- Aug 14, 2025
Malicious code in luna-sagitta-scripts-magellan (npm)
- Aug 14, 2025
Malicious code in luna-package-local-pavo (npm)
- Aug 14, 2025
Malicious code in luna-mock (npm)
- Aug 14, 2025
Malicious code in luna-got-auth0-yildun (npm)
- Aug 14, 2025
Malicious code in luna-blaze-development-terser-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in luminsign-test (npm)
- Aug 14, 2025
Malicious code in luminsign (npm)
- Aug 14, 2025
Malicious code in luminescence-ultra-transhumanism-sync (npm)
- Aug 14, 2025
Malicious code in luminescence-rollup-augmentedreality-geoarchaeology (npm)
- Aug 14, 2025
Malicious code in luminescence-hexo-firebase-kuiperbelt (npm)
- Aug 14, 2025
Malicious code in luminescence-accretion-thuban-public (npm)
- Aug 14, 2025
Malicious code in lumialda (npm)
- Aug 14, 2025
Malicious code in lullaby_w4o1g_vcka4_jewel (npm)
- Aug 14, 2025
Malicious code in lullaby_t1h2y_1ni4e_zenith (npm)
- Aug 14, 2025
Malicious code in lullaby_9h66u_bkrmb_noir (npm)
- Aug 14, 2025
Malicious code in lullaby_4edz4_qrv4x_hush (npm)
- Aug 14, 2025
Malicious code in lullaby_0pmex_mw1ot_ripple (npm)
- Aug 14, 2025
Malicious code in lukemftp (npm)
- Aug 14, 2025
Malicious code in lukcydraw (npm)
- Aug 14, 2025
Malicious code in luhnar (npm)
- Aug 14, 2025
Malicious code in lufsmeter (npm)
- Aug 14, 2025
Malicious code in ludogram (npm)
- Aug 14, 2025
Malicious code in luckcheck (npm)
- Aug 14, 2025
Malicious code in lucid-xe98q-a6ugy-pebble-project (npm)
- Aug 14, 2025
Malicious code in lucid-qe1cb-2zrgs-opal-project (npm)
- Aug 14, 2025
Malicious code in lucid-nbtr3-ux4vf-moondust-project (npm)
- Aug 14, 2025
Malicious code in lucid-h55nb-ww1k0-iceberg-project (npm)
- Aug 14, 2025
Malicious code in lucid-f7gm8-la403-mosaic-project (npm)
- Aug 14, 2025
Malicious code in lucid-awlr6-lle14-raven-project (npm)
- Aug 14, 2025
Malicious code in lubase (npm)
- Aug 14, 2025
Malicious code in luasel (npm)
- Aug 14, 2025
Malicious code in luafix (npm)
- Aug 14, 2025
Malicious code in luafiveq (npm)
- Aug 14, 2025
Malicious code in ltebbs (npm)
- Aug 14, 2025
Malicious code in lsysprog (npm)
- Aug 14, 2025
Malicious code in lsongbook (npm)
- Aug 14, 2025
Malicious code in lsgate (npm)
- Aug 14, 2025
Malicious code in lscwpekmndxvqytu (npm)
- Aug 14, 2025
Malicious code in lsapomfyvbjhigqd (npm)
- Aug 14, 2025
Malicious code in lrmcgbzywisdqvap (npm)
- Aug 14, 2025
Malicious code in lrbqswtexcjikdhz (npm)
- Aug 14, 2025
Malicious code in lr.sidebar (npm)
- Aug 14, 2025
Malicious code in lqoxneptdbwkiysz (npm)
- Aug 14, 2025
Malicious code in lqaodmfgevutkcks (npm)
Page 5478 of 6,634