Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in lava-fjord-bvg897-project (npm)
- Aug 14, 2025
Malicious code in lava-fern-ulm049-project (npm)
- Aug 14, 2025
Malicious code in lava-aroma-gtg518-project (npm)
- Aug 14, 2025
Malicious code in launchpad-integration-test (npm)
- Aug 14, 2025
Malicious code in launce (npm)
- Aug 14, 2025
Malicious code in latexsq (npm)
- Aug 14, 2025
Malicious code in latexocr (npm)
- Aug 14, 2025
Malicious code in latestgps (npm)
- Aug 14, 2025
Malicious code in lat9xw (npm)
- Aug 14, 2025
Malicious code in lasttry (npm)
- Aug 14, 2025
Malicious code in lasttrack (npm)
- Aug 14, 2025
Malicious code in lastbash (npm)
- Aug 14, 2025
Malicious code in lasertank (npm)
- Aug 14, 2025
Malicious code in laserhawk (npm)
- Aug 14, 2025
Malicious code in larch-yew-oj7m (npm)
- Aug 14, 2025
Malicious code in larch-lettuce-pgsj (npm)
- Aug 14, 2025
Malicious code in larch-lettuce-er6h (npm)
- Aug 14, 2025
Malicious code in larch-kapok-ty92 (npm)
- Aug 14, 2025
Malicious code in larch-island-yjpq (npm)
- Aug 14, 2025
Malicious code in larch-grape-aeon (npm)
- Aug 14, 2025
Malicious code in larch-gorilla-n0m6 (npm)
- Aug 14, 2025
Malicious code in laptrinhc (npm)
- Aug 14, 2025
Malicious code in lapsing (npm)
- Aug 14, 2025
Malicious code in lantern-core (npm)
- Aug 14, 2025
Malicious code in lantern-blueprint (npm)
- Aug 14, 2025
Malicious code in lanstant (npm)
- Aug 14, 2025
Malicious code in lanmei (npm)
- Aug 14, 2025
Malicious code in langsci (npm)
- Aug 14, 2025
Malicious code in langdet (npm)
- Aug 14, 2025
Malicious code in lang-rep (npm)
- Aug 14, 2025
Malicious code in landslide (npm)
- Aug 14, 2025
Malicious code in landsend (npm)
- Aug 14, 2025
Malicious code in lametasks (npm)
- Aug 14, 2025
Malicious code in lambda-pipeline-construct (npm)
- Aug 14, 2025
Malicious code in lambda-fast-yaml-quick-virtualize (npm)
- Aug 14, 2025
Malicious code in lakers-shop---nba-jersey (npm)
- Aug 14, 2025
Malicious code in lake_xxkfm_2fude_dusk (npm)
- Aug 14, 2025
Malicious code in lake_tfts4_ivnpt_kale (npm)
- Aug 14, 2025
Malicious code in lake_lbios_u9fv2_verdant (npm)
- Aug 14, 2025
Malicious code in lake_ixge7_z8q3d_pinnacle (npm)
- Aug 14, 2025
Malicious code in lake-fqqnv-wiwwj-zephyr-project (npm)
- Aug 14, 2025
Malicious code in laila-tempe94-sukiwir (npm)
- Aug 14, 2025
Malicious code in laila-tempe69-breki (npm)
- Aug 14, 2025
Malicious code in laila-soto27-kuki (npm)
- Aug 14, 2025
Malicious code in laila-sambel76-sukiwir (npm)
- Aug 14, 2025
Malicious code in laila-ruwet77-breki (npm)
- Aug 14, 2025
Malicious code in laila-rojak24-kuki (npm)
- Aug 14, 2025
Malicious code in laila-ragi80-sukiwir (npm)
- Aug 14, 2025
Malicious code in laila-mie31-sukiwir (npm)
- Aug 14, 2025
Malicious code in laila-lepet44-breki (npm)
Page 5492 of 6,634