Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,578 total · sorted newest first- Sep 17, 2026
Malicious code in less-centauri-prettier-antares (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-cosmiconfig-prompts-ganymede (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-jekyll-deneb-luna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-lint-staged-csv-local (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-gulp-yaml-crust (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-sagitta-webdriver-manager-leda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-avior-cluster-callisto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-loader-cross-env-nebula-ceres (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lepton-weywot-mira-pino-pretty (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-labyrinth-vpd730-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in less-antimatter-slides-phoebe (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leonardosilva (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leonard-soluble-pot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lesley-teadev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-glade-ybz022-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-xerus-vup017-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-quilt-ehn798-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lepton-xanthus-paleoanthropology-abiogenesis (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lerna-test-app3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-reef-tgh987-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-nymph-ffs528-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leonard-tea-archive (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lepton-cache-soap-hexo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-jellyfish-alw656-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lerna-test-app1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leomira (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-reef-fef391-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leo-sf-symbols (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-kale-fyu360-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lerna-test-app2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-umbra-cdv910-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lesmetro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lepton-sociobiology-duplex-nestjs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-opal-nfa379-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leocare-new (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lepton-async-archaeogenetics-exoplanet (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-yeti-kzy985-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lepton-husky-phenomic-hermes (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-hedgehog-syt044-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-opaline-wuc995-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-tornado-qro175-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leopard-evergreen-tdg897-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leostorm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lentengstasiun-tool (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lemurwall (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lengthy_quelea_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lentengsakal-tool (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lengxue-jiushi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lengthy_mollusk_z3n (npm)
1 compromised version
Page 137 of 7,312