Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in limited-parallel-loop (npm)
- Aug 14, 2025
Malicious code in limitationlifecycle-paypal (npm)
- Aug 14, 2025
Malicious code in limestone_tij9k_27eoq_quicksilver (npm)
- Aug 14, 2025
Malicious code in limestone_t9xdc_ja3o0_boulder (npm)
- Aug 14, 2025
Malicious code in limestone_jbv4x_w7cvm_whirlwind (npm)
- Aug 14, 2025
Malicious code in limestone_b9sgs_b58v6_yellow (npm)
- Aug 14, 2025
Malicious code in limart (npm)
- Aug 14, 2025
Malicious code in lima-zulu-ytsi (npm)
- Aug 14, 2025
Malicious code in lima-watermelon-9djg (npm)
- Aug 14, 2025
Malicious code in lima-vanilla-plfd (npm)
- Aug 14, 2025
Malicious code in lima-vanilla-eueu (npm)
- Aug 14, 2025
Malicious code in lima-uniform-sierra-dkkgm (npm)
- Aug 14, 2025
Malicious code in lima-ugli-zulu-jipaz (npm)
- Aug 14, 2025
Malicious code in lima-ugli-kiwi-ytpln (npm)
- Aug 14, 2025
Malicious code in lima-sierra-schr (npm)
- Aug 14, 2025
Malicious code in lima-sierra-gtmc (npm)
- Aug 14, 2025
Malicious code in lima-sierra-echo-ejkmd (npm)
- Aug 14, 2025
Malicious code in lima-s4w-project (npm)
- Aug 14, 2025
Malicious code in lima-romeo-hbxh (npm)
- Aug 14, 2025
Malicious code in lima-papa-xigua-fmxiy (npm)
- Aug 14, 2025
Malicious code in lima-papa-bpro (npm)
- Aug 14, 2025
Malicious code in lima-p92-project (npm)
- Aug 14, 2025
Malicious code in lima-oscar-kiwi-ogzar (npm)
- Aug 14, 2025
Malicious code in lima-november-alpha-otykt (npm)
- Aug 14, 2025
Malicious code in lima-nko-project (npm)
- Aug 14, 2025
Malicious code in lima-nectarine-ywyp (npm)
- Aug 14, 2025
Malicious code in lima-nectarine-lcdl (npm)
- Aug 14, 2025
Malicious code in lima-nectarine-echo-ypzst (npm)
- Aug 14, 2025
Malicious code in lima-n0i-project (npm)
- Aug 14, 2025
Malicious code in lima-lemon-zaze (npm)
- Aug 14, 2025
Malicious code in lima-kiwi-ohzr (npm)
- Aug 14, 2025
Malicious code in lima-kiwi-gxxg (npm)
- Aug 14, 2025
Malicious code in lima-india-apple-ncbqo (npm)
- Aug 14, 2025
Malicious code in lima-hotel-zucchini-yoeeq (npm)
- Aug 14, 2025
Malicious code in lima-honeydew-strawberry-pgews (npm)
- Aug 14, 2025
Malicious code in lima-fig-banana-aatzs (npm)
- Aug 14, 2025
Malicious code in lima-elderberry-afkj (npm)
- Aug 14, 2025
Malicious code in lima-eio-project (npm)
- Aug 14, 2025
Malicious code in lima-echo-zzts (npm)
- Aug 14, 2025
Malicious code in lima-echo-dibo (npm)
- Aug 14, 2025
Malicious code in lima-dragonfruit-ulvr (npm)
- Aug 14, 2025
Malicious code in lima-cx4-project (npm)
- Aug 14, 2025
Malicious code in lima-cherry-opmz (npm)
- Aug 14, 2025
Malicious code in lima-charlie-xvwn (npm)
- Aug 14, 2025
Malicious code in lima-cga-project (npm)
- Aug 14, 2025
Malicious code in lima-bravo-quince-cmfwz (npm)
- Aug 14, 2025
Malicious code in lima-anchor-1pzf (npm)
- Aug 14, 2025
Malicious code in lima-96z-project (npm)
- Aug 14, 2025
Malicious code in lima-68a-project (npm)
- Aug 14, 2025
Malicious code in lima-5zz-project (npm)
Page 5484 of 6,634