Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,580 total · sorted newest first- Sep 17, 2026
Malicious code in latin_beetle_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_termite_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latifhameed (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latin-lime-halibut (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_wasp_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latexocr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latifabdul (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latifameen (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_viper_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latin_bear_blush-23 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latin-aquamarine-partridge (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latin_armadillo_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_finch_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_silkworm_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lat9xw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_iguana_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_locust_apricot-16 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_lynx_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lasttrack (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late-maroon-anteater (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latam-xp-analytics-plugin-absmartly (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_pike_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lasertank (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_mongoose_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lastbash (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late-lavender-canid (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_cod_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late-rose-bee (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late-bronze-bobolink (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lasttry (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laserhawk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in latam-xp-analytics-plugin-gtm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late-white-whale (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_gazelle_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_fish_dumbs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_manatee_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_guanaco_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late-amethyst-gecko (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_rhinoceros_dumbs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in late_seahorse_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lastlasttrialllll (npm)
1 compromised version
- Sep 17, 2026
Malicious code in large-scarlet-tarantula (npm)
1 compromised version
- Sep 17, 2026
Malicious code in large_catshark_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laredoute (npm)
1 compromised version
- Sep 17, 2026
Malicious code in larbiquiche (npm)
1 compromised version
- Sep 17, 2026
Malicious code in large_cricket_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in large_snipe_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in large_marlin_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in large_mandrill_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in large-coffee-kingfisher (npm)
1 compromised version
Page 152 of 7,312