Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Sep 17, 2026
Malicious code in lexical-red-catfish (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lexmar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lfnvrkikegxtocpb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lexical_chickadee-appteadev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lexical_clownfish_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lexical-crimson-hummingbird (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lexicaltext (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lexical_zebra_dumbs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lexical_boar_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-oberon-install-antares (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-slides-build-xanadu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levontest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-parallax-janus-atlas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-octans-nova-warp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-testcafe-janus-private (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-lacerta-entanglement-entanglement (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-levels-ora-package (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-yaml-build-shelljs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-xanthus-publish-publish (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-sync-galaxy-inquirer (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-postgres-io-grus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-yakutsk-gemini-tethys (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-yakutsk-halley-transform (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-npm-yaml-xanadu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levitate-check-imports (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lexi-data-api (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-paleoecology-blackhole-abiogenesis (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-octans-octans-neptune (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-spectron-webdriver-callisto-babel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-got-react-bootstrap-selenium (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lewis-teadev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-eris-ora-hydra (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-jsonp-iota-abiogenesis (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-node-config-nodejs-dione (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lexemus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-event-bionics-nodejs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levis (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lew (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-warp-mongodb-slides (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-optimize-css-assets-webpack-plugin-hermes-callisto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-markdown-cli-cosmiconfig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-telesto-eslint-postgres (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lettuce-tornado-5aby (npm)
1 compromised version
- Sep 17, 2026
Malicious code in level_bee_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in level_hamster_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levels-canopus-webdriver-mocha-spectron (npm)
1 compromised version
- Sep 17, 2026
Malicious code in level-lavender-hare (npm)
1 compromised version
- Sep 17, 2026
Malicious code in level-flush (npm)
1 compromised version
- Sep 17, 2026
Malicious code in levelq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in level-json (npm)
1 compromised version
Page 133 of 7,312