Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in lima-5i9-project (npm)
- Aug 14, 2025
Malicious code in lima-2vm-project (npm)
- Aug 14, 2025
Malicious code in lima-148-project (npm)
- Aug 14, 2025
Malicious code in lima-0q2-project (npm)
- Aug 14, 2025
Malicious code in lilypad-wisp-khn198-project (npm)
- Aug 14, 2025
Malicious code in lilypad-whale-ttu456-project (npm)
- Aug 14, 2025
Malicious code in lilypad-whale-eul538-project (npm)
- Aug 14, 2025
Malicious code in lilypad-wave-hwm885-project (npm)
- Aug 14, 2025
Malicious code in lilypad-quilt-qcy408-project (npm)
- Aug 14, 2025
Malicious code in lilypad-jungle-smt429-project (npm)
- Aug 14, 2025
Malicious code in lilypad-icicle-ugd428-project (npm)
- Aug 14, 2025
Malicious code in lilypad-hammock-cnr879-project (npm)
- Aug 14, 2025
Malicious code in lilypad-frost-fky005-project (npm)
- Aug 14, 2025
Malicious code in lilypad-desert-ibb608-project (npm)
- Aug 14, 2025
Malicious code in lilypad-cat-ygm946-project (npm)
- Aug 14, 2025
Malicious code in lilypad-butterfly-qzq971-project (npm)
- Aug 14, 2025
Malicious code in lilypad-brook-vlr939-project (npm)
- Aug 14, 2025
Malicious code in lilyinput (npm)
- Aug 14, 2025
Malicious code in lily_wn9fl_xt1lk_quasar (npm)
- Aug 14, 2025
Malicious code in lily_whkye_ixnsw_island (npm)
- Aug 14, 2025
Malicious code in lily_bi67o_vy4l7_yosemite (npm)
- Aug 14, 2025
Malicious code in lily_92vr6_x3nqm_bluebird (npm)
- Aug 14, 2025
Malicious code in lilomi (npm)
- Aug 14, 2025
Malicious code in lilac-xylophone-mff121-project (npm)
- Aug 14, 2025
Malicious code in lilac-whale-ple393-project (npm)
- Aug 14, 2025
Malicious code in lilac-tiger-oco836-project (npm)
- Aug 14, 2025
Malicious code in lilac-rainbow-amj521-project (npm)
- Aug 14, 2025
Malicious code in lilac-nebula-qsn624-project (npm)
- Aug 14, 2025
Malicious code in lilac-jewel-nbh856-project (npm)
- Aug 14, 2025
Malicious code in lilac-iris-ozy598-project (npm)
- Aug 14, 2025
Malicious code in lilac-icicle-qgq507-project (npm)
- Aug 14, 2025
Malicious code in lilac-gorge-txc607-project (npm)
- Aug 14, 2025
Malicious code in lilac-elephant-xjq378-project (npm)
- Aug 14, 2025
Malicious code in likecoin (npm)
- Aug 14, 2025
Malicious code in likable (npm)
- Aug 14, 2025
Malicious code in lightyear-troposphere-adonis-kronos (npm)
- Aug 14, 2025
Malicious code in lightyear-neutronstar-eris-webdriverio (npm)
- Aug 14, 2025
Malicious code in lightweight-charts-local (npm)
- Aug 14, 2025
Malicious code in lightweight-charts-4.0 (npm)
- Aug 14, 2025
Malicious code in lightweight-charts-3.8 (npm)
- Aug 14, 2025
Malicious code in lightout (npm)
- Aug 14, 2025
Malicious code in lightning-yellow-atl710-project (npm)
- Aug 14, 2025
Malicious code in lightning-yard-byt303-project (npm)
- Aug 14, 2025
Malicious code in lightning-whirlpool-wrf426-project (npm)
- Aug 14, 2025
Malicious code in lightning-whale-ohb752-project (npm)
- Aug 14, 2025
Malicious code in lightning-waterfall-jvc223-project (npm)
- Aug 14, 2025
Malicious code in lightning-violet-bjr544-project (npm)
- Aug 14, 2025
Malicious code in lightning-tiger-bhz676-project (npm)
- Aug 14, 2025
Malicious code in lightning-components-stubs (npm)
- Aug 14, 2025
Malicious code in lightning-arctic-hkz110-project (npm)
Page 5485 of 6,634