Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in lightiim (npm)
- Aug 14, 2025
Malicious code in lighthouse-vinegar-neu2 (npm)
- Aug 14, 2025
Malicious code in lighthouse-quinoa-v6vv (npm)
- Aug 14, 2025
Malicious code in lighthouse-date-hf2i (npm)
- Aug 14, 2025
Malicious code in lighthouse-beetroot-uw5y (npm)
- Aug 14, 2025
Malicious code in lighthouse-beetroot-3esx (npm)
- Aug 14, 2025
Malicious code in lifxkit (npm)
- Aug 14, 2025
Malicious code in lifted (npm)
- Aug 14, 2025
Malicious code in lifeweb (npm)
- Aug 14, 2025
Malicious code in lifeup (npm)
- Aug 14, 2025
Malicious code in lifematon (npm)
- Aug 14, 2025
Malicious code in lifelab (npm)
- Aug 14, 2025
Malicious code in lifecnc (npm)
- Aug 14, 2025
Malicious code in lidewyde (npm)
- Aug 14, 2025
Malicious code in lichen-x02p7-gha4x-thunder-project (npm)
- Aug 14, 2025
Malicious code in lichen-twshi-r04ud-zenith-project (npm)
- Aug 14, 2025
Malicious code in lichen-cj6zk-dh8wd-orbit-project (npm)
- Aug 14, 2025
Malicious code in lichen-4qcee-425uk-yonder-project (npm)
- Aug 14, 2025
Malicious code in lichen-1iocs-k4zcj-ripple-project (npm)
- Aug 14, 2025
Malicious code in licence-checker (npm)
- Aug 14, 2025
Malicious code in libusby (npm)
- Aug 14, 2025
Malicious code in libusbip (npm)
- Aug 14, 2025
Malicious code in libucl (npm)
- Aug 14, 2025
Malicious code in libsord (npm)
- Aug 14, 2025
Malicious code in libsipc (npm)
- Aug 14, 2025
Malicious code in libsignon (npm)
- Aug 14, 2025
Malicious code in libretee (npm)
- Aug 14, 2025
Malicious code in library-slides-spectron-webdriver-isostasy (npm)
- Aug 14, 2025
Malicious code in library-metalsmith-apollo-protractor (npm)
- Aug 14, 2025
Malicious code in library-commitizen-webdriver-manager-neptunology (npm)
- Aug 14, 2025
Malicious code in libpostcss (npm)
- Aug 14, 2025
Malicious code in libparty (npm)
- Aug 14, 2025
Malicious code in liboccam (npm)
- Aug 14, 2025
Malicious code in libnfc (npm)
- Aug 14, 2025
Malicious code in libmii (npm)
- Aug 14, 2025
Malicious code in libmap (npm)
- Aug 14, 2025
Malicious code in liblcdgr (npm)
- Aug 14, 2025
Malicious code in libinoro (npm)
- Aug 14, 2025
Malicious code in libi-common (npm)
- Aug 14, 2025
Malicious code in libhid (npm)
- Aug 14, 2025
Malicious code in libhbaapi (npm)
- Aug 14, 2025
Malicious code in libfluid (npm)
- Aug 14, 2025
Malicious code in libefsm (npm)
- Aug 14, 2025
Malicious code in libdvd (npm)
- Aug 14, 2025
Malicious code in libdgg (npm)
- Aug 14, 2025
Malicious code in libcutsim (npm)
- Aug 14, 2025
Malicious code in libbsd (npm)
- Aug 14, 2025
Malicious code in libblp (npm)
- Aug 14, 2025
Malicious code in lib-transmit (npm)
- Aug 14, 2025
Malicious code in lib-react-component-page-notifications (npm)
Page 5486 of 6,634