Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Sep 17, 2026
Malicious code in lina-lapis5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis88-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kupat97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kupat93-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis92-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis82-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis11-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kupat41-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kupat33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis51-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis32-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis46-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-lapis71-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue68-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue93-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue8-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue80-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue96-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue51-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue49-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue68-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue97-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue45-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue57-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue98-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue47-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kupang100-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kupang60-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue52-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue96-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue69-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue59-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kupang25-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue83-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kupang51-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue94-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue83-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue36-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kolak35-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue25-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kue32-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-kolak67-breki (npm)
1 compromised version
Page 116 of 7,312