Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in load-validate-function-star-execute (npm)
- Aug 14, 2025
Malicious code in load-runtime-benchmark-hash-cluster (npm)
- Aug 14, 2025
Malicious code in load-lambda-fire-code-emulate (npm)
- Aug 14, 2025
Malicious code in load-hot-info-delta-encode (npm)
- Aug 14, 2025
Malicious code in load-cat-container-hot-book (npm)
- Aug 14, 2025
Malicious code in load-book-encrypt-deserialize-permission (npm)
- Aug 14, 2025
Malicious code in lnxqpyseckhfwikg (npm)
- Aug 14, 2025
Malicious code in lnchubgit (npm)
- Aug 14, 2025
Malicious code in LMX-Data (npm)
- Aug 14, 2025
Malicious code in lmONE (npm)
- Aug 14, 2025
Malicious code in lmaocr (npm)
- Aug 14, 2025
Malicious code in llaveros (npm)
- Aug 14, 2025
Malicious code in lkwoqtgnxcrkjupm (npm)
- Aug 14, 2025
Malicious code in lkmhvfiqzdoxntge (npm)
- Aug 14, 2025
Malicious code in ljudtest (npm)
- Aug 14, 2025
Malicious code in ljgeyrvziktfndxw (npm)
- Aug 14, 2025
Malicious code in liyxsbnmqvfkauoe (npm)
- Aug 14, 2025
Malicious code in livermore (npm)
- Aug 14, 2025
Malicious code in livepipe (npm)
- Aug 14, 2025
Malicious code in livemesh (npm)
- Aug 14, 2025
Malicious code in liveclone (npm)
- Aug 14, 2025
Malicious code in liveadhan (npm)
- Aug 14, 2025
Malicious code in littletea (npm)
- Aug 14, 2025
Malicious code in little-pictures (npm)
- Aug 14, 2025
Malicious code in litteras (npm)
- Aug 14, 2025
Malicious code in lithosphere-ophiuchus-technosignature-sedimentology (npm)
- Aug 14, 2025
Malicious code in lithosphere-cryonics-gammarayburst-epigenetics (npm)
- Aug 14, 2025
Malicious code in lithosphere-astro-prompts-paleoceanography (npm)
- Aug 14, 2025
Malicious code in lithcrypt (npm)
- Aug 14, 2025
Malicious code in litemvc (npm)
- Aug 14, 2025
Malicious code in litemodal (npm)
- Aug 14, 2025
Malicious code in litecpool (npm)
- Aug 14, 2025
Malicious code in litechat (npm)
- Aug 14, 2025
Malicious code in lita-external (npm)
- Aug 14, 2025
Malicious code in listtasks (npm)
- Aug 14, 2025
Malicious code in listables (npm)
- Aug 14, 2025
Malicious code in lisponaut (npm)
- Aug 14, 2025
Malicious code in liscom (npm)
- Aug 14, 2025
Malicious code in lisa-tempe47-kuki (npm)
- Aug 14, 2025
Malicious code in lisa-telurtahu71-breki (npm)
- Aug 14, 2025
Malicious code in lisa-sate96-kuki (npm)
- Aug 14, 2025
Malicious code in lisa-peyek86-kuki (npm)
- Aug 14, 2025
Malicious code in lisa-ongol-ongol1-kuki (npm)
- Aug 14, 2025
Malicious code in lisa-mie2-kuki (npm)
- Aug 14, 2025
Malicious code in lisa-lapis74-breki (npm)
- Aug 14, 2025
Malicious code in liruby (npm)
- Aug 14, 2025
Malicious code in liquid-c (npm)
- Aug 14, 2025
Malicious code in lipoas (npm)
- Aug 14, 2025
Malicious code in lior-testflow (npm)
- Aug 14, 2025
Malicious code in lionwiki (npm)
Page 5482 of 6,634