Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Sep 17, 2026
Malicious code in lightyear-ichnology-transform-phoebe (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_eagle_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_hookworm_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_hippopotamus_lime-57 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightspark-js (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_caterpillar_requirement (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightyear-neutronstar-eris-webdriverio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_jaguar_moccasin-23 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_earwig_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_caterpillar_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_amphibian_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightout (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_bonobo_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightweight-charts-4.1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like-turquoise-tuna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightning-whirlpool-wrf426-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like-green-salamander (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_cat_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_elk_replicate_automation (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightweight-charts-3.8 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightspark-crypto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightweight-charts-4.0 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightning-yard-byt303-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_goldfish_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in likable (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_antlion_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_donkey-appteadev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like-maroon-wren (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightweight-charts-local (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_falcon_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in like_goose_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightning-tiger-bhz676-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightning-components-stubs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightning-arctic-hkz110-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in light_mite_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in light_tarsier_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in light_mongoose_dumbs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in light_wren_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in light_koi_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightning-iguana-tpf326-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightning-waterfall-jvc223-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lighthouse-beetroot-uw5y (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lighthouse-beetroot-3esx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in light_sheep_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in light_vole_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lighthouse-date-hf2i (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightning-whale-ohb752-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lighthouse-quinoa-v6vv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lightiim (npm)
1 compromised version
- Sep 17, 2026
Malicious code in light_reptile_z3n (npm)
1 compromised version
Page 125 of 7,312