Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,581 total · sorted newest first- Sep 17, 2026
Malicious code in lala-poke18 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke42 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke5 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke46 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke17 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke45 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke19 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke43 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke32 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke21 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke38 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke29 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke33 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke51 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke27 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke22 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke48 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laithcroissantbx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lakshmanverma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-wajit89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lake_ixge7_z8q3d_pinnacle (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke11 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-wajit66-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lakers-shop---nba-jersey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lake_tfts4_ivnpt_kale (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke12 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laizi-yabolahande-mimi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lake-fqqnv-wiwwj-zephyr-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-wajit76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-wajit64-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke10 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lake_xxkfm_2fude_dusk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lala-poke1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lake_lbios_u9fv2_verdant (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laithcroissant (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laithbaguette (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-wajit48-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-toge46-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-tumis79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-tempe33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-tek47-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-toge32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-tumis51-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-tek44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-tek73-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-tiwul19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-tek71-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-tiwul60-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-telurtahu91-sukiwir (npm)
1 compromised version
Page 155 of 7,312