Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Aug 14, 2025
Malicious code in leopard-reef-fef391-project (npm)
- Aug 14, 2025
Malicious code in leopard-quilt-ehn798-project (npm)
- Aug 14, 2025
Malicious code in leopard-opaline-wuc995-project (npm)
- Aug 14, 2025
Malicious code in leopard-opal-nfa379-project (npm)
- Aug 14, 2025
Malicious code in leopard-nymph-ffs528-project (npm)
- Aug 14, 2025
Malicious code in leopard-labyrinth-vpd730-project (npm)
- Aug 14, 2025
Malicious code in leopard-kale-fyu360-project (npm)
- Aug 14, 2025
Malicious code in leopard-jellyfish-alw656-project (npm)
- Aug 14, 2025
Malicious code in leopard-hedgehog-syt044-project (npm)
- Aug 14, 2025
Malicious code in leopard-glade-ybz022-project (npm)
- Aug 14, 2025
Malicious code in leopard-evergreen-tdg897-project (npm)
- Aug 14, 2025
Malicious code in leomira (npm)
- Aug 14, 2025
Malicious code in leo-password-reset-service (npm)
- Aug 14, 2025
Malicious code in lens-data (npm)
- Aug 14, 2025
Malicious code in lengxue-jiushi (npm)
- Aug 14, 2025
Malicious code in lemurwall (npm)
- Aug 14, 2025
Malicious code in lemputes (npm)
- Aug 14, 2025
Malicious code in lemonboy (npm)
- Aug 14, 2025
Malicious code in lemon-zulu-ccee (npm)
- Aug 14, 2025
Malicious code in lemon-zulu-banana-vwybn (npm)
- Aug 14, 2025
Malicious code in lemon-yo5-project (npm)
- Aug 14, 2025
Malicious code in lemon-yankee-tjcb (npm)
- Aug 14, 2025
Malicious code in lemon-yankee-pkql (npm)
- Aug 14, 2025
Malicious code in lemon-yankee-jvht (npm)
- Aug 14, 2025
Malicious code in lemon-yam-jhtm (npm)
- Aug 14, 2025
Malicious code in lemon-xray-wvzh (npm)
- Aug 14, 2025
Malicious code in lemon-xray-strawberry-qwova (npm)
- Aug 14, 2025
Malicious code in lemon-xray-romeo-qundn (npm)
- Aug 14, 2025
Malicious code in lemon-xerophyte-6rbr (npm)
- Aug 14, 2025
Malicious code in lemon-xdt-project (npm)
- Aug 14, 2025
Malicious code in lemon-wzy-project (npm)
- Aug 14, 2025
Malicious code in lemon-watermelon-hihe (npm)
- Aug 14, 2025
Malicious code in lemon-vzr-project (npm)
- Aug 14, 2025
Malicious code in lemon-vlh-project (npm)
- Aug 14, 2025
Malicious code in lemon-uit-project (npm)
- Aug 14, 2025
Malicious code in lemon-tango-cherry-pnsyi (npm)
- Aug 14, 2025
Malicious code in lemon-strawberry-victor-xdnms (npm)
- Aug 14, 2025
Malicious code in lemon-raspberry-yankee-bhebn (npm)
- Aug 14, 2025
Malicious code in lemon-qut-project (npm)
- Aug 14, 2025
Malicious code in lemon-papaya-pzy3 (npm)
- Aug 14, 2025
Malicious code in lemon-papaya-golf-eyqvl (npm)
- Aug 14, 2025
Malicious code in lemon-p1s-project (npm)
- Aug 14, 2025
Malicious code in lemon-orange-rkmb (npm)
- Aug 14, 2025
Malicious code in lemon-oba-project (npm)
- Aug 14, 2025
Malicious code in lemon-o7s-project (npm)
- Aug 14, 2025
Malicious code in lemon-nvs-project (npm)
- Aug 14, 2025
Malicious code in lemon-november-sierra-ypzgl (npm)
- Aug 14, 2025
Malicious code in lemon-mike-papa-zfgsi (npm)
- Aug 14, 2025
Malicious code in lemon-mango-cherry-ldblp (npm)
- Aug 14, 2025
Malicious code in lemon-kuiper-5i4j (npm)
Page 5951 of 7,326