Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Sep 17, 2026
Malicious code in limited_asp_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-papa-xigua-fmxiy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-sierra-gtmc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_aardvark_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited-coffee-crawdad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-uniform-sierra-dkkgm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-ugli-kiwi-ytpln (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited-teal-octopus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_damselfly_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limestone_tij9k_27eoq_quicksilver (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lime-web-component-interfaces (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limart (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-watermelon-9djg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-sierra-echo-ejkmd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-vanilla-eueu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_boar_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limestone_jbv4x_w7cvm_whirlwind (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-s4w-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_anteater_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limestone_b9sgs_b58v6_yellow (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_caribou_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_cow_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited-amber-elephant (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_fish_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limestone_t9xdc_ja3o0_boulder (npm)
1 compromised version
- Sep 17, 2026
Malicious code in limited_ape_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-romeo-hbxh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-ugli-zulu-jipaz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-zulu-ytsi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-oscar-kiwi-ogzar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-nectarine-echo-ypzst (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-november-alpha-otykt (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-bravo-quince-cmfwz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-lemon-zaze (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-cga-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-echo-zzts (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-nectarine-ywyp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-nectarine-lcdl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-5zz-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-papa-bpro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-whale-ttu456-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilysuesu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-148-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-anchor-1pzf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-0q2-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-cx4-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-honeydew-strawberry-pgews (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-n0i-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-68a-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-5i9-project (npm)
1 compromised version
Page 122 of 7,312