Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in laila-kue74-sukiwir (npm)
- Aug 14, 2025
Malicious code in laila-keraktelor26-sukiwir (npm)
- Aug 14, 2025
Malicious code in laila-gorengan19-sukiwir (npm)
- Aug 14, 2025
Malicious code in laila-gembus90-breki (npm)
- Aug 14, 2025
Malicious code in laila-dodol42-breki (npm)
- Aug 14, 2025
Malicious code in lagoon-zenith-emv060-project (npm)
- Aug 14, 2025
Malicious code in lagoon-yucca-etn281-project (npm)
- Aug 14, 2025
Malicious code in lagoon-xylophone-uel276-project (npm)
- Aug 14, 2025
Malicious code in lagoon-tundra-wlc725-project (npm)
- Aug 14, 2025
Malicious code in lagoon-thunder-top089-project (npm)
- Aug 14, 2025
Malicious code in lagoon-thistle-wdj542-project (npm)
- Aug 14, 2025
Malicious code in lagoon-thistle-slk112-project (npm)
- Aug 14, 2025
Malicious code in lagoon-sunset-iea408-project (npm)
- Aug 14, 2025
Malicious code in lagoon-rose-gpy887-project (npm)
- Aug 14, 2025
Malicious code in lagoon-quasar-ksv190-project (npm)
- Aug 14, 2025
Malicious code in lagoon-oak-njc366-project (npm)
- Aug 14, 2025
Malicious code in lagoon-oak-fex595-project (npm)
- Aug 14, 2025
Malicious code in lagoon-moon-hmy577-project (npm)
- Aug 14, 2025
Malicious code in lagoon-kelp-smx161-project (npm)
- Aug 14, 2025
Malicious code in lagoon-jewel-shr048-project (npm)
- Aug 14, 2025
Malicious code in lagoon-island-lar086-project (npm)
- Aug 14, 2025
Malicious code in lagoon-infinity-iyv611-project (npm)
- Aug 14, 2025
Malicious code in lagoon-icicle-crl222-project (npm)
- Aug 14, 2025
Malicious code in lagoon-hollow-bgf252-project (npm)
- Aug 14, 2025
Malicious code in lagoon-galaxy-ipr289-project (npm)
- Aug 14, 2025
Malicious code in lagoon-evergreen-kwq796-project (npm)
- Aug 14, 2025
Malicious code in lagoon-ant-evs874-project (npm)
- Aug 14, 2025
Malicious code in lagent (npm)
- Aug 14, 2025
Malicious code in ladyphp (npm)
- Aug 14, 2025
Malicious code in laduja (npm)
- Aug 14, 2025
Malicious code in ladenes (npm)
- Aug 14, 2025
Malicious code in ladder-text-js (npm)
- Aug 14, 2025
Malicious code in lacerta-zenobia-magellan-cluster (npm)
- Aug 14, 2025
Malicious code in lacerta-mineralogy-tailwindcss-gemini (npm)
- Aug 14, 2025
Malicious code in lacerta-eris-altair-terser-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in lacalma (npm)
- Aug 14, 2025
Malicious code in labzine (npm)
- Aug 14, 2025
Malicious code in labyrinth_w4a5w_btn55_trill (npm)
- Aug 14, 2025
Malicious code in labyrinth_m44cp_8yf3f_iris (npm)
- Aug 14, 2025
Malicious code in labyrinth_g3mww_aik3j_raven (npm)
- Aug 14, 2025
Malicious code in labyrinth_cjvvv_7pz4t_opaline (npm)
- Aug 14, 2025
Malicious code in labyrinth_bfui4_ymyi6_ivy (npm)
- Aug 14, 2025
Malicious code in labyrinth-volcano-gsh193-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-ufvpn-egdh0-emerald-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-trcek-88blj-celestial-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-savanna-tqb592-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-sapphire-byr950-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-quill-qfk926-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-quartz-bfb310-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-pucpz-0lb6l-utopia-project (npm)
Page 5493 of 6,634