Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in lib-deepdocs-js (npm)
- Aug 14, 2025
Malicious code in lianji (npm)
- Aug 14, 2025
Malicious code in lhrwvaebftsxmkjk (npm)
- Aug 14, 2025
Malicious code in lhdnysawcxbgukrk (npm)
- Aug 14, 2025
Malicious code in lg-mutator-mobile-ads (npm)
- Aug 14, 2025
Malicious code in lfnvrkikegxtocpb (npm)
- Aug 14, 2025
Malicious code in lfgjkvmrzyueksoh (npm)
- Aug 14, 2025
Malicious code in leysersfx (npm)
- Aug 14, 2025
Malicious code in lexmar (npm)
- Aug 14, 2025
Malicious code in lexicrypt (npm)
- Aug 14, 2025
Malicious code in lexi-data-api (npm)
- Aug 14, 2025
Malicious code in lexemus (npm)
- Aug 14, 2025
Malicious code in lew (npm)
- Aug 14, 2025
Malicious code in levontest (npm)
- Aug 14, 2025
Malicious code in levis (npm)
- Aug 14, 2025
Malicious code in levels-yakutsk-gemini-tethys (npm)
- Aug 14, 2025
Malicious code in levels-xanthus-publish-publish (npm)
- Aug 14, 2025
Malicious code in levels-postgres-io-grus (npm)
- Aug 14, 2025
Malicious code in levels-optimize-css-assets-webpack-plugin-hermes-callisto (npm)
- Aug 14, 2025
Malicious code in levels-carpo-nightwatch-local (npm)
- Aug 14, 2025
Malicious code in levels-alphard-meteor-meissa (npm)
- Aug 14, 2025
Malicious code in levelq (npm)
- Aug 14, 2025
Malicious code in level-json-wrapper (npm)
- Aug 14, 2025
Malicious code in level-json-cache (npm)
- Aug 14, 2025
Malicious code in level-json (npm)
- Aug 14, 2025
Malicious code in level-flush (npm)
- Aug 14, 2025
Malicious code in level-client (npm)
- Aug 14, 2025
Malicious code in lettuce-zulu-74in (npm)
- Aug 14, 2025
Malicious code in lettuce-wormhole-5bh3 (npm)
- Aug 14, 2025
Malicious code in lettuce-tornado-5aby (npm)
- Aug 14, 2025
Malicious code in lettuce-flare-w6xj (npm)
- Aug 14, 2025
Malicious code in lettuce-date-6zbg (npm)
- Aug 14, 2025
Malicious code in letsmrt (npm)
- Aug 14, 2025
Malicious code in letra (npm)
- Aug 14, 2025
Malicious code in letproj (npm)
- Aug 14, 2025
Malicious code in letotests (npm)
- Aug 14, 2025
Malicious code in letjzsndypcavoqr (npm)
- Aug 14, 2025
Malicious code in lessonly-chrome-extension (npm)
- Aug 14, 2025
Malicious code in lessio (npm)
- Aug 14, 2025
Malicious code in lessaddin (npm)
- Aug 14, 2025
Malicious code in less-xml-asteroid-cryonics (npm)
- Aug 14, 2025
Malicious code in less-update-kaus-build (npm)
- Aug 14, 2025
Malicious code in less-triton-selenology-castor (npm)
- Aug 14, 2025
Malicious code in less-sadr-test-enceladus (npm)
- Aug 14, 2025
Malicious code in less-loader-spectron-exoplanetology-phenomic (npm)
- Aug 14, 2025
Malicious code in less-loader-resolvers-zephyr-postcss (npm)
- Aug 14, 2025
Malicious code in less-loader-nightmare-dendrochronology-chromedriver (npm)
- Aug 14, 2025
Malicious code in less-loader-colors-nashira-docusaurus (npm)
- Aug 14, 2025
Malicious code in less-loader-algol-chakra-ui-octans (npm)
- Aug 14, 2025
Malicious code in less-common-words (npm)
Page 5487 of 6,634