Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Sep 17, 2026
Malicious code in lina-brengkes40-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-brengkes67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan96-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bika51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-botok92-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bika66-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-botok99-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-botok70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bika11-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan90-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-brengkes11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-brengkes36-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bika42-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bika15-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_harrier_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakso93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_prawn_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_gecko_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan36-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakso14-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakso90-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_mackerel_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-asinan14-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_kiwi_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan61-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_whitefish_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan15-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_haddock_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limonero (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan75-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakso97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_mongoose_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-asinan92-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-asinan49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_tern_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_ocelot_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakso89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan54-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan13-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bakwan7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_ox_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_constrictor_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-victor-lemon-epnhd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited-parallel-loop (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-p92-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-sierra-schr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limitationlifecycle-paypal (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-vanilla-plfd (npm)
1 compromised version
Page 121 of 7,312