Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,579 total · sorted newest first- Sep 17, 2026
Malicious code in leadconduit-closeio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in le-core-infra (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-cake (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs92092 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-autoresponder (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-cashcall (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs94010 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-billsdotcom (npm)
1 compromised version
- Sep 17, 2026
Malicious code in leadconduit-costco (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs92011 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldxzfmewhpjaunok (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldaptool (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs60214 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs94010 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs92004 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs84006 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lc-config (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs79029 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs60214 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs94006 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lcshub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs95005 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lbench (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lbuebird (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs60015 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lbswrdkhvyfjxica (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs60015 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lbwvbl-devapptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs51214 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs92009 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs95006 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs79029 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs60152 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs92011 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lcnc-app (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs84006 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs83600 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldash (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lc50uo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lbibli (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs92092 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldbench (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs92010 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lddgame (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhpgemrdhs51214 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhchukyso (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs83600 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ldhemrdhs92006 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lazyhtml-scripts (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lazy_tarantula_z3n (npm)
1 compromised version
Page 147 of 7,312