Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in leadconduit-facebook (npm)
- Aug 14, 2025
Malicious code in leadconduit-experian (npm)
- Aug 14, 2025
Malicious code in leadconduit-email-delivery (npm)
- Aug 14, 2025
Malicious code in leadconduit-datamyx (npm)
- Aug 14, 2025
Malicious code in leadconduit-costco (npm)
- Aug 14, 2025
Malicious code in leadconduit-closeio (npm)
- Aug 14, 2025
Malicious code in leadconduit-clearbit (npm)
- Aug 14, 2025
Malicious code in leadconduit-cashcall (npm)
- Aug 14, 2025
Malicious code in leadconduit-calq (npm)
- Aug 14, 2025
Malicious code in leadconduit-cake (npm)
- Aug 14, 2025
Malicious code in leadconduit-briteverify (npm)
- Aug 14, 2025
Malicious code in leadconduit-billsdotcom (npm)
- Aug 14, 2025
Malicious code in leadconduit-autoresponder (npm)
- Aug 14, 2025
Malicious code in ldxzfmewhpjaunok (npm)
- Aug 14, 2025
Malicious code in ldweisser (npm)
- Aug 14, 2025
Malicious code in ldvbug (npm)
- Aug 14, 2025
Malicious code in ldoash (npm)
- Aug 14, 2025
Malicious code in lddgame (npm)
- Aug 14, 2025
Malicious code in ldbench (npm)
- Aug 14, 2025
Malicious code in ldash (npm)
- Aug 14, 2025
Malicious code in ldaptool (npm)
- Aug 14, 2025
Malicious code in lcshub (npm)
- Aug 14, 2025
Malicious code in lc50uo (npm)
- Aug 14, 2025
Malicious code in lbuebird (npm)
- Aug 14, 2025
Malicious code in lbswrdkhvyfjxica (npm)
- Aug 14, 2025
Malicious code in lbibli (npm)
- Aug 14, 2025
Malicious code in lbench (npm)
- Aug 14, 2025
Malicious code in lazyseq (npm)
- Aug 14, 2025
Malicious code in layout-experimental (npm)
- Aug 14, 2025
Malicious code in laxfragor (npm)
- Aug 14, 2025
Malicious code in lawliet (npm)
- Aug 14, 2025
Malicious code in lavender-ux121-pvzlc-xanadu-project (npm)
- Aug 14, 2025
Malicious code in lavender-smab1-0r9t7-crescent-project (npm)
- Aug 14, 2025
Malicious code in lavender-munq4-1mpil-grove-project (npm)
- Aug 14, 2025
Malicious code in lavender-kmk4q-04c0e-night-project (npm)
- Aug 14, 2025
Malicious code in lavender-jr66q-bimn1-wander-project (npm)
- Aug 14, 2025
Malicious code in lavender-9w6q2-wpzp8-emerald-project (npm)
- Aug 14, 2025
Malicious code in lava-yacht-hfy974-project (npm)
- Aug 14, 2025
Malicious code in lava-xylophone-dgt758-project (npm)
- Aug 14, 2025
Malicious code in lava-xenon-tls920-project (npm)
- Aug 14, 2025
Malicious code in lava-tide-dfd075-project (npm)
- Aug 14, 2025
Malicious code in lava-thistle-izd211-project (npm)
- Aug 14, 2025
Malicious code in lava-saturn-eir283-project (npm)
- Aug 14, 2025
Malicious code in lava-rainbow-ykg517-project (npm)
- Aug 14, 2025
Malicious code in lava-octopus-tna469-project (npm)
- Aug 14, 2025
Malicious code in lava-labyrinth-gwx069-project (npm)
- Aug 14, 2025
Malicious code in lava-kite-ydp165-project (npm)
- Aug 14, 2025
Malicious code in lava-jade-qmd286-project (npm)
- Aug 14, 2025
Malicious code in lava-hill-ley368-project (npm)
- Aug 14, 2025
Malicious code in lava-hammock-owx175-project (npm)
Page 5491 of 6,634