Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,573 total · sorted newest first- Sep 17, 2026
Malicious code in linear-sapphire-wildcat (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_platypus_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_marlin_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_hoverfly_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear-violet-swift (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit81-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_mink_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_angelfish_teal-57 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_salamander_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_shark_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_anglerfish_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_ptarmigan_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear-airbyte-source (npm)
1 compromised version
- Sep 17, 2026
Malicious code in line-configs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit70-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit52-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_cricket_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear-copper-hippopotamus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_asp_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear-blush-boar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit49-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_gorilla_cyan-62 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_beaver_requirement (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linbot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear-connect (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_chickadee_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_camel_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_impala_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in line-charts-g200172 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_centipede_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear-plum-cephalopod (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lindas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linear_owl_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ubi97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tongseng40-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tumis27-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ubi64-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ubi28-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ubi68-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit39-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tumis98-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-wajit18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tumis80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ubi24-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-toge10-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tiwul89-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tiwul78-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tiwul34-pore (npm)
1 compromised version
Page 106 of 7,312