Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,579 total · sorted newest first- Sep 17, 2026
Malicious code in leadconduit-homesdotcom (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-webbula (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-leadid (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-lendio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leading-green-mink (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-twitter (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-pipelinesuccess (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-leadpoint (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-mortech (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leading-chocolate-roadrunner (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-zipcodes (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-sendgrid (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-integration-autoresponder (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leading-ivory-mule (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-pipeline-success (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-telesign (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-militarydotcom (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-towerdata (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-twilio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-marketo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leading-pink-eagle (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-leadperfection (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-salesforce (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-pcdi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-lowermybills (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs92007 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-powerbi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-whitepages (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-datamyx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs92009 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs92010 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs92004 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldweisser (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-highrise (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-clearbit (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-facebook (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs60152 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs95005 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-generic (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldvbug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-hubspot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-calq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-experian (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-briteverify (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs92007 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs94006 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldoash (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs95006 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs92006 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-email-delivery (npm)
1 compromised version
Page 146 of 7,312