Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Aug 14, 2025
Malicious code in lynx-elara-antd-nodejs (npm)
- Aug 14, 2025
Malicious code in lynx-blackhole-typeorm-umbriel (npm)
- Aug 14, 2025
Malicious code in lyftkube (npm)
- Aug 14, 2025
Malicious code in lyft-web-button (npm)
- Aug 14, 2025
Malicious code in lyft-dataset-sdk (npm)
- Aug 14, 2025
Malicious code in lyft-coloralgorithm (npm)
- Aug 14, 2025
Malicious code in lxwwxdeve (npm)
- Aug 14, 2025
Malicious code in lxcstack (npm)
- Aug 14, 2025
Malicious code in lwjglgame (npm)
- Aug 14, 2025
Malicious code in lwc-components-lightning (npm)
- Aug 14, 2025
Malicious code in lvmeter (npm)
- Aug 14, 2025
Malicious code in lvguanjia (npm)
- Aug 14, 2025
Malicious code in lvaoepwuxithkkrc (npm)
- Aug 14, 2025
Malicious code in luzyvida (npm)
- Aug 14, 2025
Malicious code in lutfi-rangi27-sukiwir (npm)
- Aug 14, 2025
Malicious code in lutfi-peyek32-breki (npm)
- Aug 14, 2025
Malicious code in lutachu (npm)
- Aug 14, 2025
Malicious code in luster-ext-env (npm)
- Aug 14, 2025
Malicious code in luster-ctrl (npm)
- Aug 14, 2025
Malicious code in lurk-the-chats (npm)
- Aug 14, 2025
Malicious code in lupinistestingsomethingnewonnpmagain3 (npm)
- Aug 14, 2025
Malicious code in lupinistestingsomethingnewonnpmagain (npm)
- Aug 14, 2025
Malicious code in lupinistestinganotherpackage (npm)
- Aug 14, 2025
Malicious code in luotsi (npm)
- Aug 14, 2025
Malicious code in luntbuild (npm)
- Aug 14, 2025
Malicious code in lunoine7 (npm)
- Aug 14, 2025
Malicious code in lunchat (npm)
- Aug 14, 2025
Malicious code in lunarized (npm)
- Aug 14, 2025
Malicious code in lunarcrush.com (npm)
- Aug 14, 2025
Malicious code in lunar_pjibk_mssbn_karma (npm)
- Aug 14, 2025
Malicious code in lunar_gqxqw_j18kd_dawn (npm)
- Aug 14, 2025
Malicious code in lunar-zenith-xl9x (npm)
- Aug 14, 2025
Malicious code in lunar-zamia-b0qf (npm)
- Aug 14, 2025
Malicious code in lunar-ysdya-qpxo9-terra-project (npm)
- Aug 14, 2025
Malicious code in lunar-yam-3j90 (npm)
- Aug 14, 2025
Malicious code in lunar-yacht-qzrj (npm)
- Aug 14, 2025
Malicious code in lunar-void-142h (npm)
- Aug 14, 2025
Malicious code in lunar-rh3rt-60yk8-zen-project (npm)
- Aug 14, 2025
Malicious code in lunar-raspberry-7soq (npm)
- Aug 14, 2025
Malicious code in lunar-mountain-xlxk (npm)
- Aug 14, 2025
Malicious code in lunar-india-4k0o (npm)
- Aug 14, 2025
Malicious code in lunar-gs6x8-5u52d-keystone-project (npm)
- Aug 14, 2025
Malicious code in lunar-fig-zs2k (npm)
- Aug 14, 2025
Malicious code in lunar-czft2-k4qqe-juniper-project (npm)
- Aug 14, 2025
Malicious code in lunar-cherry-9kak (npm)
- Aug 14, 2025
Malicious code in lunar-ce51f-xnk9a-yonder-project (npm)
- Aug 14, 2025
Malicious code in lunar-bw5wq-wquq3-thunder-project (npm)
- Aug 14, 2025
Malicious code in lunar-b55dp-hxcr6-yellow-project (npm)
- Aug 14, 2025
Malicious code in luna-sublimation-gacrux-sqlite (npm)
- Aug 14, 2025
Malicious code in luna-sagitta-scripts-magellan (npm)
Page 5940 of 7,326