Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Aug 14, 2025
Malicious code in lima-vanilla-eueu (npm)
- Aug 14, 2025
Malicious code in lima-uniform-sierra-dkkgm (npm)
- Aug 14, 2025
Malicious code in lima-ugli-zulu-jipaz (npm)
- Aug 14, 2025
Malicious code in lima-ugli-kiwi-ytpln (npm)
- Aug 14, 2025
Malicious code in lima-sierra-schr (npm)
- Aug 14, 2025
Malicious code in lima-sierra-gtmc (npm)
- Aug 14, 2025
Malicious code in lima-sierra-echo-ejkmd (npm)
- Aug 14, 2025
Malicious code in lima-s4w-project (npm)
- Aug 14, 2025
Malicious code in lima-romeo-hbxh (npm)
- Aug 14, 2025
Malicious code in lima-papa-xigua-fmxiy (npm)
- Aug 14, 2025
Malicious code in lima-papa-bpro (npm)
- Aug 14, 2025
Malicious code in lima-p92-project (npm)
- Aug 14, 2025
Malicious code in lima-oscar-kiwi-ogzar (npm)
- Aug 14, 2025
Malicious code in lima-november-alpha-otykt (npm)
- Aug 14, 2025
Malicious code in lima-nko-project (npm)
- Aug 14, 2025
Malicious code in lima-nectarine-ywyp (npm)
- Aug 14, 2025
Malicious code in lima-nectarine-lcdl (npm)
- Aug 14, 2025
Malicious code in lima-nectarine-echo-ypzst (npm)
- Aug 14, 2025
Malicious code in lima-n0i-project (npm)
- Aug 14, 2025
Malicious code in lima-lemon-zaze (npm)
- Aug 14, 2025
Malicious code in lima-kiwi-ohzr (npm)
- Aug 14, 2025
Malicious code in lima-kiwi-gxxg (npm)
- Aug 14, 2025
Malicious code in lima-india-apple-ncbqo (npm)
- Aug 14, 2025
Malicious code in lima-hotel-zucchini-yoeeq (npm)
- Aug 14, 2025
Malicious code in lima-honeydew-strawberry-pgews (npm)
- Aug 14, 2025
Malicious code in lima-fig-banana-aatzs (npm)
- Aug 14, 2025
Malicious code in lima-elderberry-afkj (npm)
- Aug 14, 2025
Malicious code in lima-eio-project (npm)
- Aug 14, 2025
Malicious code in lima-echo-zzts (npm)
- Aug 14, 2025
Malicious code in lima-echo-dibo (npm)
- Aug 14, 2025
Malicious code in lima-dragonfruit-ulvr (npm)
- Aug 14, 2025
Malicious code in lima-cx4-project (npm)
- Aug 14, 2025
Malicious code in lima-cherry-opmz (npm)
- Aug 14, 2025
Malicious code in lima-charlie-xvwn (npm)
- Aug 14, 2025
Malicious code in lima-cga-project (npm)
- Aug 14, 2025
Malicious code in lima-bravo-quince-cmfwz (npm)
- Aug 14, 2025
Malicious code in lima-anchor-1pzf (npm)
- Aug 14, 2025
Malicious code in lima-96z-project (npm)
- Aug 14, 2025
Malicious code in lima-68a-project (npm)
- Aug 14, 2025
Malicious code in lima-5zz-project (npm)
- Aug 14, 2025
Malicious code in lima-5i9-project (npm)
- Aug 14, 2025
Malicious code in lima-2vm-project (npm)
- Aug 14, 2025
Malicious code in lima-148-project (npm)
- Aug 14, 2025
Malicious code in lima-0q2-project (npm)
- Aug 14, 2025
Malicious code in lilypad-wisp-khn198-project (npm)
- Aug 14, 2025
Malicious code in lilypad-whale-ttu456-project (npm)
- Aug 14, 2025
Malicious code in lilypad-whale-eul538-project (npm)
- Aug 14, 2025
Malicious code in lilypad-wave-hwm885-project (npm)
- Aug 14, 2025
Malicious code in lilypad-quilt-qcy408-project (npm)
- Aug 14, 2025
Malicious code in lilypad-jungle-smt429-project (npm)
Page 5947 of 7,326