Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,579 total · sorted newest first- Sep 17, 2026
Malicious code in pulse-pwn-9f3a2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ragacateslikodi (npm)
7 compromised versions
- Sep 17, 2026
Malicious code in tailwindcss-contact-form (npm)
1 compromised version
- Sep 17, 2026
Malicious code in marketing-mcp (PyPI)
1 compromised version
- Sep 17, 2026
Malicious code in leda-pegasus-magnetosphere-sagitta (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-kaus-bellatrix-leda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-mini-css-extract-plugin-backend-radiant (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-loopback-markdown-pdf-quasar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-metalsmith-cassini-avior (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-miranda-oberon-capella (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-npm-chai-sync (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-nodejs-nextjs-sirius (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-javascript-stream-husky (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-middleware-pm2-impulse (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-morgan-xanthus-ophiuchus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-jsonp-dependencies-eslint-config (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-koa-dotenv-safe-atlas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-async-nodejs-izar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-betelgeuse-chariklo-backend (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-acamar-sequelize-sass-loader (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-grus-bellatrix-docusaurus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lectron (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-configstore-fornax-mui (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-bulma-rate-limiter-delphinus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-cassini-dactyl-mongodb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-jabbah-exec-prettier-stylelint (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-element-ui-radiant-sagitta (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-epigenetics-redshift-geochronology (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-electron-builder-chromedriver-nodemon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-command-superagent-cache (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-capella-celeste-spawn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-andromeda-spectron-neptune (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-docusaurus-dactyl-ignite (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-command-aquarius-leda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-cassini-wasat-aldebaran (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-farout-alphard-kastra (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-eslint-leda-electron (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-jabbah-google-rigel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-envconfig-odin-sass-loader (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-gemini-saturnology-jovian (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-commitizen-markdown-ariel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-geckodriver-miranda-helios (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-development-config-eclipse (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-fornax-dagda-css-loader (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-hercules-restart-upgrade (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-dependencies-fomalhaut-rocket (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-janus-solis-dynamo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-convict-commitizen-cassini (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leda-hydra-pm2-indus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leading_crab_z3n (npm)
1 compromised version
Page 144 of 7,312