Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,573 total · sorted newest first- Sep 17, 2026
Malicious code in lina-poke73 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke71 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke50 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke61 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke62 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke72 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke65 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke58 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke64 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke7 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke70 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke8 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke63 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke66 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ragi30-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke57 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke49 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke53 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke59 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke48 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke5 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke24 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke22 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke23 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke4 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke43 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke41 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke45 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke30 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke40 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke38 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke39 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke46 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke44 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke42 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke29 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke14 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke34 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke37 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke35 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke12 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke18 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke17 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke16 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke10 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke31 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke20 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke33 (npm)
1 compromised version
Page 111 of 7,312