Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in lion-vinegar-fpow (npm)
- Aug 14, 2025
Malicious code in lion-orbit-wk7y (npm)
- Aug 14, 2025
Malicious code in lion-jungle-02k8 (npm)
- Aug 14, 2025
Malicious code in lion-grape-atbg (npm)
- Aug 14, 2025
Malicious code in lion-falcon-lrub (npm)
- Aug 14, 2025
Malicious code in linuxrite (npm)
- Aug 14, 2025
Malicious code in linuxjoy (npm)
- Aug 14, 2025
Malicious code in linuxiats (npm)
- Aug 14, 2025
Malicious code in linuxfun (npm)
- Aug 14, 2025
Malicious code in linuxdict (npm)
- Aug 14, 2025
Malicious code in linux-libs (npm)
- Aug 14, 2025
Malicious code in linux-heike-rumen (npm)
- Aug 14, 2025
Malicious code in lint-staged-mesosphere-geomorphology-blazar (npm)
- Aug 14, 2025
Malicious code in lint-staged-install-bellatrix-geodynamo (npm)
- Aug 14, 2025
Malicious code in lint-staged-ceres-metalsmith-non-blocking (npm)
- Aug 14, 2025
Malicious code in lint-slidev-fork-nebula (npm)
- Aug 14, 2025
Malicious code in lint-perseus-css-minimizer-webpack-plugin-cygnus (npm)
- Aug 14, 2025
Malicious code in lint-hydra-gravity-prosthetics (npm)
- Aug 14, 2025
Malicious code in lint-framework-link-toml (npm)
- Aug 14, 2025
Malicious code in lint-branch-name (npm)
- Aug 14, 2025
Malicious code in lint-apex-magnetar-pulsar (npm)
- Aug 14, 2025
Malicious code in linkstrgo (npm)
- Aug 14, 2025
Malicious code in linkpath-paypal (npm)
- Aug 14, 2025
Malicious code in linkomnia (npm)
- Aug 14, 2025
Malicious code in linkedout (npm)
- Aug 14, 2025
Malicious code in linkatzju (npm)
- Aug 14, 2025
Malicious code in link-rest-client (npm)
- Aug 14, 2025
Malicious code in link-phoenix-jsonp-concurrently (npm)
- Aug 14, 2025
Malicious code in link-next (npm)
- Aug 14, 2025
Malicious code in link-function-info-tree-sandbox (npm)
- Aug 14, 2025
Malicious code in link-eslint-config-jabbah-darkenergy (npm)
- Aug 14, 2025
Malicious code in linickx (npm)
- Aug 14, 2025
Malicious code in lingotool (npm)
- Aug 14, 2025
Malicious code in lines-three (npm)
- Aug 14, 2025
Malicious code in lineqs (npm)
- Aug 14, 2025
Malicious code in linear-connect (npm)
- Aug 14, 2025
Malicious code in line-charts-g200172 (npm)
- Aug 14, 2025
Malicious code in lindas (npm)
- Aug 14, 2025
Malicious code in linbot (npm)
- Aug 14, 2025
Malicious code in linaeduca (npm)
- Aug 14, 2025
Malicious code in lina-telurtahu75-sukiwir (npm)
- Aug 14, 2025
Malicious code in lina-ruwet47-sukiwir (npm)
- Aug 14, 2025
Malicious code in lina-rojak73-kuki (npm)
- Aug 14, 2025
Malicious code in lina-rojak30-sukiwir (npm)
- Aug 14, 2025
Malicious code in lina-nasi59-kuki (npm)
- Aug 14, 2025
Malicious code in lina-lapis39-breki (npm)
- Aug 14, 2025
Malicious code in lina-klipo76-sukiwir (npm)
- Aug 14, 2025
Malicious code in lina-bubur29-breki (npm)
- Aug 14, 2025
Malicious code in lina-brongkos42-breki (npm)
- Aug 14, 2025
Malicious code in limonero (npm)
Page 5483 of 6,634