Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Aug 14, 2025
Malicious code in leadconduit-briteverify (npm)
- Aug 14, 2025
Malicious code in leadconduit-billsdotcom (npm)
- Aug 14, 2025
Malicious code in leadconduit-autoresponder (npm)
- Aug 14, 2025
Malicious code in ldxzfmewhpjaunok (npm)
- Aug 14, 2025
Malicious code in ldweisser (npm)
- Aug 14, 2025
Malicious code in ldvbug (npm)
- Aug 14, 2025
Malicious code in ldoash (npm)
- Aug 14, 2025
Malicious code in lddgame (npm)
- Aug 14, 2025
Malicious code in ldbench (npm)
- Aug 14, 2025
Malicious code in ldash (npm)
- Aug 14, 2025
Malicious code in ldaptool (npm)
- Aug 14, 2025
Malicious code in lcshub (npm)
- Aug 14, 2025
Malicious code in lc50uo (npm)
- Aug 14, 2025
Malicious code in lbuebird (npm)
- Aug 14, 2025
Malicious code in lbswrdkhvyfjxica (npm)
- Aug 14, 2025
Malicious code in lbibli (npm)
- Aug 14, 2025
Malicious code in lbench (npm)
- Aug 14, 2025
Malicious code in lazyseq (npm)
- Aug 14, 2025
Malicious code in layout-experimental (npm)
- Aug 14, 2025
Malicious code in laxfragor (npm)
- Aug 14, 2025
Malicious code in lawliet (npm)
- Aug 14, 2025
Malicious code in lavender-ux121-pvzlc-xanadu-project (npm)
- Aug 14, 2025
Malicious code in lavender-smab1-0r9t7-crescent-project (npm)
- Aug 14, 2025
Malicious code in lavender-munq4-1mpil-grove-project (npm)
- Aug 14, 2025
Malicious code in lavender-kmk4q-04c0e-night-project (npm)
- Aug 14, 2025
Malicious code in lavender-jr66q-bimn1-wander-project (npm)
- Aug 14, 2025
Malicious code in lavender-9w6q2-wpzp8-emerald-project (npm)
- Aug 14, 2025
Malicious code in lava-yacht-hfy974-project (npm)
- Aug 14, 2025
Malicious code in lava-xylophone-dgt758-project (npm)
- Aug 14, 2025
Malicious code in lava-xenon-tls920-project (npm)
- Aug 14, 2025
Malicious code in lava-tide-dfd075-project (npm)
- Aug 14, 2025
Malicious code in lava-thistle-izd211-project (npm)
- Aug 14, 2025
Malicious code in lava-saturn-eir283-project (npm)
- Aug 14, 2025
Malicious code in lava-rainbow-ykg517-project (npm)
- Aug 14, 2025
Malicious code in lava-octopus-tna469-project (npm)
- Aug 14, 2025
Malicious code in lava-labyrinth-gwx069-project (npm)
- Aug 14, 2025
Malicious code in lava-kite-ydp165-project (npm)
- Aug 14, 2025
Malicious code in lava-jade-qmd286-project (npm)
- Aug 14, 2025
Malicious code in lava-hill-ley368-project (npm)
- Aug 14, 2025
Malicious code in lava-hammock-owx175-project (npm)
- Aug 14, 2025
Malicious code in lava-fjord-bvg897-project (npm)
- Aug 14, 2025
Malicious code in lava-fern-ulm049-project (npm)
- Aug 14, 2025
Malicious code in lava-aroma-gtg518-project (npm)
- Aug 14, 2025
Malicious code in launchpad-integration-test (npm)
- Aug 14, 2025
Malicious code in launce (npm)
- Aug 14, 2025
Malicious code in latexsq (npm)
- Aug 14, 2025
Malicious code in latexocr (npm)
- Aug 14, 2025
Malicious code in latestgps (npm)
- Aug 14, 2025
Malicious code in lat9xw (npm)
- Aug 14, 2025
Malicious code in lasttry (npm)
Page 5954 of 7,326