Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in lemon-papaya-golf-eyqvl (npm)
- Aug 14, 2025
Malicious code in lemon-p1s-project (npm)
- Aug 14, 2025
Malicious code in lemon-orange-rkmb (npm)
- Aug 14, 2025
Malicious code in lemon-oba-project (npm)
- Aug 14, 2025
Malicious code in lemon-o7s-project (npm)
- Aug 14, 2025
Malicious code in lemon-nvs-project (npm)
- Aug 14, 2025
Malicious code in lemon-november-sierra-ypzgl (npm)
- Aug 14, 2025
Malicious code in lemon-mike-papa-zfgsi (npm)
- Aug 14, 2025
Malicious code in lemon-mango-cherry-ldblp (npm)
- Aug 14, 2025
Malicious code in lemon-kuiper-5i4j (npm)
- Aug 14, 2025
Malicious code in lemon-jbe-project (npm)
- Aug 14, 2025
Malicious code in lemon-i0q-project (npm)
- Aug 14, 2025
Malicious code in lemon-hotel-lwns (npm)
- Aug 14, 2025
Malicious code in lemon-grape-zwmv (npm)
- Aug 14, 2025
Malicious code in lemon-foxtrot-kiwi-kcomt (npm)
- Aug 14, 2025
Malicious code in lemon-fig-spuj (npm)
- Aug 14, 2025
Malicious code in lemon-fig-dfyo (npm)
- Aug 14, 2025
Malicious code in lemon-elderberry-fig-lqoac (npm)
- Aug 14, 2025
Malicious code in lemon-echo-gmgn (npm)
- Aug 14, 2025
Malicious code in lemon-dvd-project (npm)
- Aug 14, 2025
Malicious code in lemon-date-xigua-ipxic (npm)
- Aug 14, 2025
Malicious code in lemon-date-wdif (npm)
- Aug 14, 2025
Malicious code in lemon-banana-uvsg (npm)
- Aug 14, 2025
Malicious code in lemon-banana-cwns (npm)
- Aug 14, 2025
Malicious code in lemon-apple-victor-idjgi (npm)
- Aug 14, 2025
Malicious code in lemon-apple-banana-cghuc (npm)
- Aug 14, 2025
Malicious code in lemon-a2e-project (npm)
- Aug 14, 2025
Malicious code in lemon-94n-project (npm)
- Aug 14, 2025
Malicious code in lemon-8s5-project (npm)
- Aug 14, 2025
Malicious code in lemon-8rx-project (npm)
- Aug 14, 2025
Malicious code in lemon-6sj-project (npm)
- Aug 14, 2025
Malicious code in lemon-5mn-project (npm)
- Aug 14, 2025
Malicious code in lemon-3y0-project (npm)
- Aug 14, 2025
Malicious code in lemon-3l1-project (npm)
- Aug 14, 2025
Malicious code in lemon-0hw-project (npm)
- Aug 14, 2025
Malicious code in lekrep (npm)
- Aug 14, 2025
Malicious code in leijure (npm)
- Aug 14, 2025
Malicious code in leihgreen (npm)
- Aug 14, 2025
Malicious code in legoquiz (npm)
- Aug 14, 2025
Malicious code in legobot (npm)
- Aug 14, 2025
Malicious code in leggings (npm)
- Aug 14, 2025
Malicious code in legend_qmyr1_3npqh_fern (npm)
- Aug 14, 2025
Malicious code in legend_ph02a_g6ca0_maple (npm)
- Aug 14, 2025
Malicious code in legend_nl0kp_7kl0k_rose (npm)
- Aug 14, 2025
Malicious code in legend_dd1pc_pveew_wind (npm)
- Aug 14, 2025
Malicious code in lefunge (npm)
- Aug 14, 2025
Malicious code in left-hand-navigation (npm)
- Aug 14, 2025
Malicious code in leekloud (npm)
- Aug 14, 2025
Malicious code in leectron (npm)
- Aug 14, 2025
Malicious code in ledweb (npm)
Page 5489 of 6,634