Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,568 total · sorted newest first- Sep 17, 2026
Malicious code in lintang-tea53 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea37 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea39 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea76 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea78 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea61 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea80 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea62 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea65 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea74 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea63 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea45 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea47 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea75 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea33 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea73 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea52 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea59 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea72 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea5 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea23 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lint-standard-dependencies-meteor (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lint-winston-browserify-airbnb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lint-staged-xerxes-repository-metalsmith (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lint-winston-schema-passport (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea21 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea101 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea25 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea28 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea26 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea18 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-korea1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea19 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea14 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-korea2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea22 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lint-yaml-sirius-soap (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea20 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lint-toml-janus-cross-env (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea12 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea16 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lint-xo-ceres-mini-css-extract-plugin (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea17 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea11 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea15 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea10 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea32 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea27 (npm)
1 compromised version
Page 100 of 7,312