Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in lpiiexam (npm)
- Aug 14, 2025
Malicious code in lpcjkzfyrtbovsne (npm)
- Aug 14, 2025
Malicious code in lp-unistat-logger (npm)
- Aug 14, 2025
Malicious code in lp-middlewares (npm)
- Aug 14, 2025
Malicious code in lp-babel (npm)
- Aug 14, 2025
Malicious code in lowkick (npm)
- Aug 14, 2025
Malicious code in lowbrow (npm)
- Aug 14, 2025
Malicious code in loveshack (npm)
- Aug 14, 2025
Malicious code in lovepy (npm)
- Aug 14, 2025
Malicious code in lovepets (npm)
- Aug 14, 2025
Malicious code in lovebeat (npm)
- Aug 14, 2025
Malicious code in lounge-theme-amoled (npm)
- Aug 14, 2025
Malicious code in loudong-ruqin-jingcui (npm)
- Aug 14, 2025
Malicious code in lotus-p7q1d-c29z2-iceberg-project (npm)
- Aug 14, 2025
Malicious code in lotus-krwlr-qvulp-kismet-project (npm)
- Aug 14, 2025
Malicious code in lotus-8fjua-8by7e-celestial-project (npm)
- Aug 14, 2025
Malicious code in lotus-6c7bt-96orv-mirage-project (npm)
- Aug 14, 2025
Malicious code in lotus-689e5-hsbn3-utopia-project (npm)
- Aug 14, 2025
Malicious code in lotus-5sbc5-tvb8k-obsidian-project (npm)
- Aug 14, 2025
Malicious code in lostbut (npm)
- Aug 14, 2025
Malicious code in lorraine (npm)
- Aug 14, 2025
Malicious code in lorien (npm)
- Aug 14, 2025
Malicious code in loquitor (npm)
- Aug 14, 2025
Malicious code in lootsie-sdk-ui-es5-inferno (npm)
- Aug 14, 2025
Malicious code in lootsie-sdk-core-es5 (npm)
- Aug 14, 2025
Malicious code in lootsie-sdk-app-es5-inferno (npm)
- Aug 14, 2025
Malicious code in loopback4-example-recommender (npm)
- Aug 14, 2025
Malicious code in loopback-playwright-global-nashira (npm)
- Aug 14, 2025
Malicious code in loopback-gammarayburst-boson-auth0 (npm)
- Aug 14, 2025
Malicious code in loopback-css-loader-sagitta-terraforming (npm)
- Aug 14, 2025
Malicious code in loopback-connector-soap-elemetal (npm)
- Aug 14, 2025
Malicious code in loop-wolf-vortex-yonder (npm)
- Aug 14, 2025
Malicious code in loop-sass-loader-coronalmassejection-higgs (npm)
- Aug 14, 2025
Malicious code in loop-ophiuchus-parcel-yonder (npm)
- Aug 14, 2025
Malicious code in loop-higgs-eclipse-dendrochronology (npm)
- Aug 14, 2025
Malicious code in loop-greatfilter-extremophile-sagitta (npm)
- Aug 14, 2025
Malicious code in loop-concurrently-carina-elektra (npm)
- Aug 14, 2025
Malicious code in loop-apollo-canopus-inquirer (npm)
- Aug 14, 2025
Malicious code in loomsdk (npm)
- Aug 14, 2025
Malicious code in loom-plugin-webpack (npm)
- Aug 14, 2025
Malicious code in loom-plugin-typescript (npm)
- Aug 14, 2025
Malicious code in loom-plugin-stylelint (npm)
- Aug 14, 2025
Malicious code in loom-plugin-rollup (npm)
- Aug 14, 2025
Malicious code in loom-plugin-prettier (npm)
- Aug 14, 2025
Malicious code in loom-plugin-postcss (npm)
- Aug 14, 2025
Malicious code in loom-plugin-package-build (npm)
- Aug 14, 2025
Malicious code in loom-plugin-jest (npm)
- Aug 14, 2025
Malicious code in loom-plugin-eslint (npm)
- Aug 14, 2025
Malicious code in loom-plugin-build-library-extended (npm)
- Aug 14, 2025
Malicious code in loom-plugin-build-library (npm)
Page 5479 of 6,634