Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Sep 17, 2026
Malicious code in lima-kiwi-gxxg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-echo-dibo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-dragonfruit-ulvr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-whale-eul538-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-hotel-zucchini-yoeeq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-eio-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-fig-banana-aatzs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-kiwi-ohzr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-wave-hwm885-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-2vm-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-wisp-khn198-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-violet-qoo759-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-96z-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-elderberry-afkj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-cherry-opmz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-charlie-xvwn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-india-fig-asvoh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-juliet-xray-yqlpd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-india-apple-ncbqo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lima-nko-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-tiger-oco836-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilyinput (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-frost-fky005-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-cat-ygm946-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-willow-jef539-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-gorge-txc607-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-quilt-qcy408-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liloyst (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-xylophone-mff121-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in likely_yak_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilnelis-notthedevs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-icicle-qgq507-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-butterfly-qzq971-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilosyst (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lily_whkye_ixnsw_island (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilomi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-hammock-cnr879-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-iris-ozy598-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-nebula-qsn624-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilaosyst (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lily_wn9fl_xt1lk_quasar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liloyt (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilly-teadev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-whale-ple393-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-brook-vlr939-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-elephant-xjq378-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-icicle-ugd428-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lily_bi67o_vy4l7_yosemite (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilypad-desert-ibb608-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lilac-rainbow-amj521-project (npm)
1 compromised version
Page 123 of 7,312