Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Aug 14, 2025
Malicious code in linux-libs (npm)
- Aug 14, 2025
Malicious code in linux-heike-rumen (npm)
- Aug 14, 2025
Malicious code in lint-staged-mesosphere-geomorphology-blazar (npm)
- Aug 14, 2025
Malicious code in lint-staged-install-bellatrix-geodynamo (npm)
- Aug 14, 2025
Malicious code in lint-staged-ceres-metalsmith-non-blocking (npm)
- Aug 14, 2025
Malicious code in lint-slidev-fork-nebula (npm)
- Aug 14, 2025
Malicious code in lint-perseus-css-minimizer-webpack-plugin-cygnus (npm)
- Aug 14, 2025
Malicious code in lint-hydra-gravity-prosthetics (npm)
- Aug 14, 2025
Malicious code in lint-framework-link-toml (npm)
- Aug 14, 2025
Malicious code in lint-branch-name (npm)
- Aug 14, 2025
Malicious code in lint-apex-magnetar-pulsar (npm)
- Aug 14, 2025
Malicious code in linkstrgo (npm)
- Aug 14, 2025
Malicious code in linkpath-paypal (npm)
- Aug 14, 2025
Malicious code in linkomnia (npm)
- Aug 14, 2025
Malicious code in linkedout (npm)
- Aug 14, 2025
Malicious code in linkatzju (npm)
- Aug 14, 2025
Malicious code in link-rest-client (npm)
- Aug 14, 2025
Malicious code in link-phoenix-jsonp-concurrently (npm)
- Aug 14, 2025
Malicious code in link-next (npm)
- Aug 14, 2025
Malicious code in link-function-info-tree-sandbox (npm)
- Aug 14, 2025
Malicious code in link-eslint-config-jabbah-darkenergy (npm)
- Aug 14, 2025
Malicious code in linickx (npm)
- Aug 14, 2025
Malicious code in lingotool (npm)
- Aug 14, 2025
Malicious code in lines-three (npm)
- Aug 14, 2025
Malicious code in lineqs (npm)
- Aug 14, 2025
Malicious code in linear-connect (npm)
- Aug 14, 2025
Malicious code in line-charts-g200172 (npm)
- Aug 14, 2025
Malicious code in lindas (npm)
- Aug 14, 2025
Malicious code in linbot (npm)
- Aug 14, 2025
Malicious code in linaeduca (npm)
- Aug 14, 2025
Malicious code in lina-telurtahu75-sukiwir (npm)
- Aug 14, 2025
Malicious code in lina-ruwet47-sukiwir (npm)
- Aug 14, 2025
Malicious code in lina-rojak73-kuki (npm)
- Aug 14, 2025
Malicious code in lina-rojak30-sukiwir (npm)
- Aug 14, 2025
Malicious code in lina-nasi59-kuki (npm)
- Aug 14, 2025
Malicious code in lina-lapis39-breki (npm)
- Aug 14, 2025
Malicious code in lina-klipo76-sukiwir (npm)
- Aug 14, 2025
Malicious code in lina-bubur29-breki (npm)
- Aug 14, 2025
Malicious code in lina-brongkos42-breki (npm)
- Aug 14, 2025
Malicious code in limonero (npm)
- Aug 14, 2025
Malicious code in limited-parallel-loop (npm)
- Aug 14, 2025
Malicious code in limitationlifecycle-paypal (npm)
- Aug 14, 2025
Malicious code in limestone_tij9k_27eoq_quicksilver (npm)
- Aug 14, 2025
Malicious code in limestone_t9xdc_ja3o0_boulder (npm)
- Aug 14, 2025
Malicious code in limestone_jbv4x_w7cvm_whirlwind (npm)
- Aug 14, 2025
Malicious code in limestone_b9sgs_b58v6_yellow (npm)
- Aug 14, 2025
Malicious code in limart (npm)
- Aug 14, 2025
Malicious code in lima-zulu-ytsi (npm)
- Aug 14, 2025
Malicious code in lima-watermelon-9djg (npm)
- Aug 14, 2025
Malicious code in lima-vanilla-plfd (npm)
Page 5946 of 7,326