Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,580 total · sorted newest first- Sep 17, 2026
Malicious code in layla-poke90 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lazy_galliform_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke72 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lazy_donkey_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke85 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke86 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke74 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke79 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke68 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke54 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke53 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke70 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke6 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke71 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke48 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke63 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke52 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke41 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke37 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke45 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke61 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke44 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke65 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke51 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke57 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke42 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke38 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke30 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke34 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke55 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke31 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke28 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke69 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke4 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke47 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke7 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke62 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke46 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke39 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke26 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke32 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke50 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke56 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke49 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke27 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke64 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke35 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke59 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in layla-poke43 (npm)
1 compromised version
Page 149 of 7,312