Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in less-auriga-relay-yaml (npm)
- Aug 14, 2025
Malicious code in lesmetro (npm)
- Aug 14, 2025
Malicious code in lerna-test-app3 (npm)
- Aug 14, 2025
Malicious code in lerna-test-app2 (npm)
- Aug 14, 2025
Malicious code in lerna-test-app1 (npm)
- Aug 14, 2025
Malicious code in leopard-yeti-kzy985-project (npm)
- Aug 14, 2025
Malicious code in leopard-xerus-vup017-project (npm)
- Aug 14, 2025
Malicious code in leopard-umbra-cdv910-project (npm)
- Aug 14, 2025
Malicious code in leopard-tornado-qro175-project (npm)
- Aug 14, 2025
Malicious code in leopard-reef-tgh987-project (npm)
- Aug 14, 2025
Malicious code in leopard-reef-fef391-project (npm)
- Aug 14, 2025
Malicious code in leopard-quilt-ehn798-project (npm)
- Aug 14, 2025
Malicious code in leopard-opaline-wuc995-project (npm)
- Aug 14, 2025
Malicious code in leopard-opal-nfa379-project (npm)
- Aug 14, 2025
Malicious code in leopard-nymph-ffs528-project (npm)
- Aug 14, 2025
Malicious code in leopard-labyrinth-vpd730-project (npm)
- Aug 14, 2025
Malicious code in leopard-kale-fyu360-project (npm)
- Aug 14, 2025
Malicious code in leopard-jellyfish-alw656-project (npm)
- Aug 14, 2025
Malicious code in leopard-hedgehog-syt044-project (npm)
- Aug 14, 2025
Malicious code in leopard-glade-ybz022-project (npm)
- Aug 14, 2025
Malicious code in leopard-evergreen-tdg897-project (npm)
- Aug 14, 2025
Malicious code in leomira (npm)
- Aug 14, 2025
Malicious code in leo-password-reset-service (npm)
- Aug 14, 2025
Malicious code in lens-data (npm)
- Aug 14, 2025
Malicious code in lengxue-jiushi (npm)
- Aug 14, 2025
Malicious code in lemurwall (npm)
- Aug 14, 2025
Malicious code in lemputes (npm)
- Aug 14, 2025
Malicious code in lemonboy (npm)
- Aug 14, 2025
Malicious code in lemon-zulu-ccee (npm)
- Aug 14, 2025
Malicious code in lemon-zulu-banana-vwybn (npm)
- Aug 14, 2025
Malicious code in lemon-yo5-project (npm)
- Aug 14, 2025
Malicious code in lemon-yankee-tjcb (npm)
- Aug 14, 2025
Malicious code in lemon-yankee-pkql (npm)
- Aug 14, 2025
Malicious code in lemon-yankee-jvht (npm)
- Aug 14, 2025
Malicious code in lemon-yam-jhtm (npm)
- Aug 14, 2025
Malicious code in lemon-xray-wvzh (npm)
- Aug 14, 2025
Malicious code in lemon-xray-strawberry-qwova (npm)
- Aug 14, 2025
Malicious code in lemon-xray-romeo-qundn (npm)
- Aug 14, 2025
Malicious code in lemon-xerophyte-6rbr (npm)
- Aug 14, 2025
Malicious code in lemon-xdt-project (npm)
- Aug 14, 2025
Malicious code in lemon-wzy-project (npm)
- Aug 14, 2025
Malicious code in lemon-watermelon-hihe (npm)
- Aug 14, 2025
Malicious code in lemon-vzr-project (npm)
- Aug 14, 2025
Malicious code in lemon-vlh-project (npm)
- Aug 14, 2025
Malicious code in lemon-uit-project (npm)
- Aug 14, 2025
Malicious code in lemon-tango-cherry-pnsyi (npm)
- Aug 14, 2025
Malicious code in lemon-strawberry-victor-xdnms (npm)
- Aug 14, 2025
Malicious code in lemon-raspberry-yankee-bhebn (npm)
- Aug 14, 2025
Malicious code in lemon-qut-project (npm)
- Aug 14, 2025
Malicious code in lemon-papaya-pzy3 (npm)
Page 5488 of 6,634