Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,573 total · sorted newest first- Sep 17, 2026
Malicious code in linguistic_ptarmigan_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic_mosquito_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic_dove_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic_finch_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in link-astrometry-gulp-transhumanism (npm)
1 compromised version
- Sep 17, 2026
Malicious code in link-babel-rehype-bellatrix (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic_monkey_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic_perch_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic_parrotfish_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_swan_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-dna-vol1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lingotool (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_warbler_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic-cyan-slug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-xiangyu-vol1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lineqs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic-beige-mule (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lingjixian-aluoha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lingewindows (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-zhiai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-yongsheng (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghunde-liwu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lingqi-xinshijie (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_tiglon_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic-silver-marlin (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic-apricot-deer (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic_bug_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic_cockroach_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-dna-vol2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic_catshark_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linenru-chaojiandan-touzifa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lineluders (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lingqi-reiki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lingjixian-shenghuopian (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-callout (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lines-three (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-mima (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lingjiede-xunxi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_turkey_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lingqi-shouzha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-xiangyu-vol2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-zaishuohua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linghun-zhanxing (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic-beige-muskox (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linguistic-aquamarine-stoat (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit77-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linaeduca (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_ocelot_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linamaharani (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit74-miaww (npm)
1 compromised version
Page 105 of 7,312