Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ledvance-living-style-guide (npm)
- Aug 14, 2025
Malicious code in ledlamp (npm)
- Aug 14, 2025
Malicious code in ledcandle (npm)
- Aug 14, 2025
Malicious code in leda-wormhole-astrometry-module (npm)
- Aug 14, 2025
Malicious code in leda-selenology-phenomic-webpack (npm)
- Aug 14, 2025
Malicious code in leda-protractor-exoplanet-frontend (npm)
- Aug 14, 2025
Malicious code in leda-middleware-pm2-impulse (npm)
- Aug 14, 2025
Malicious code in leda-fornax-dagda-css-loader (npm)
- Aug 14, 2025
Malicious code in leda-development-config-eclipse (npm)
- Aug 14, 2025
Malicious code in lectron (npm)
- Aug 14, 2025
Malicious code in lebardon (npm)
- Aug 14, 2025
Malicious code in leatherman-js (npm)
- Aug 14, 2025
Malicious code in learns (npm)
- Aug 14, 2025
Malicious code in learnbdd (npm)
- Aug 14, 2025
Malicious code in leapviz (npm)
- Aug 14, 2025
Malicious code in leapboard (npm)
- Aug 14, 2025
Malicious code in leaiss (npm)
- Aug 14, 2025
Malicious code in leafbox (npm)
- Aug 14, 2025
Malicious code in leadcrm (npm)
- Aug 14, 2025
Malicious code in leadconduit-zipcodes (npm)
- Aug 14, 2025
Malicious code in leadconduit-zillow (npm)
- Aug 14, 2025
Malicious code in leadconduit-whitepages (npm)
- Aug 14, 2025
Malicious code in leadconduit-webbula (npm)
- Aug 14, 2025
Malicious code in leadconduit-versium (npm)
- Aug 14, 2025
Malicious code in leadconduit-velocify (npm)
- Aug 14, 2025
Malicious code in leadconduit-twitter (npm)
- Aug 14, 2025
Malicious code in leadconduit-twilio (npm)
- Aug 14, 2025
Malicious code in leadconduit-towerdata (npm)
- Aug 14, 2025
Malicious code in leadconduit-telesign (npm)
- Aug 14, 2025
Malicious code in leadconduit-sendgrid (npm)
- Aug 14, 2025
Malicious code in leadconduit-salesforce (npm)
- Aug 14, 2025
Malicious code in leadconduit-powerbi (npm)
- Aug 14, 2025
Malicious code in leadconduit-pipelinesuccess (npm)
- Aug 14, 2025
Malicious code in leadconduit-pipeline-success (npm)
- Aug 14, 2025
Malicious code in leadconduit-pcdi (npm)
- Aug 14, 2025
Malicious code in leadconduit-national-renewable-energy-lab (npm)
- Aug 14, 2025
Malicious code in leadconduit-mortech (npm)
- Aug 14, 2025
Malicious code in leadconduit-militarydotcom (npm)
- Aug 14, 2025
Malicious code in leadconduit-marketo (npm)
- Aug 14, 2025
Malicious code in leadconduit-lowermybills (npm)
- Aug 14, 2025
Malicious code in leadconduit-lendio (npm)
- Aug 14, 2025
Malicious code in leadconduit-lendingtree (npm)
- Aug 14, 2025
Malicious code in leadconduit-leadpoint (npm)
- Aug 14, 2025
Malicious code in leadconduit-leadperfection (npm)
- Aug 14, 2025
Malicious code in leadconduit-leadid (npm)
- Aug 14, 2025
Malicious code in leadconduit-integration-autoresponder (npm)
- Aug 14, 2025
Malicious code in leadconduit-hubspot (npm)
- Aug 14, 2025
Malicious code in leadconduit-homesdotcom (npm)
- Aug 14, 2025
Malicious code in leadconduit-highrise (npm)
- Aug 14, 2025
Malicious code in leadconduit-generic (npm)
Page 5490 of 6,634