Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,578 total · sorted newest first- Sep 17, 2026
Malicious code in less-xml-asteroid-cryonics (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-toml-private-soap (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-stream-publish-aurora (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-terser-umbra-regulus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lesser-orange-deer (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-sadr-test-enceladus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-mineralogy-airbnb-tardigrade (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-nconf-global-hapi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-optimize-css-assets-webpack-plugin-miranda-algol (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-miranda-rocket-altair (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-socketio-loglevel-carpo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-pavo-restart-start (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-quasar-spectroscopy-astrobiology (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-cross-env-enif-pm2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-hercules-phoenix-miranda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-spectron-exoplanetology-phenomic (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-json-sync-readable (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-pino-dotenv-safe-quark (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-phoebe-scripts-mysql (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-geckodriver-mongodb-nodejs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-rocket-adonis-kronos (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-prettier-plugin-markdown-pino-zephyr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-common-words (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-algol-chakra-ui-octans (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-cors-bootstrap-lyra (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-nightmare-dendrochronology-chromedriver (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-centauri-subscription-config (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-grus-void-biosignature (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-resolvers-zephyr-postcss (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-cluster-soap-firebase (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-farout-spawn-odin (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-despina-helios-websockets (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-orbit-outercore-graphql (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-andromeda-less-loader-envconfig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-ablation-frontend-transport (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-config-quantum-equinox (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-sirius-perseus-loglevel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-astrochemistry-ceres-halley (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-auriga-relay-yaml (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-karma-scorpius-config (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-arcturus-charon-markdown-pdf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-less-phenomic-paleoclimatology (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-colors-nashira-docusaurus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-element-ui-telesto-uninstall (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-quantum-miranda-html-webpack-plugin (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-eigenstate-eris-mineralogy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-bioinformatics-ganymede-virtualreality (npm)
1 compromised version
Page 136 of 7,312