Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Aug 14, 2025
Malicious code in lagoon-thistle-wdj542-project (npm)
- Aug 14, 2025
Malicious code in lagoon-thistle-slk112-project (npm)
- Aug 14, 2025
Malicious code in lagoon-sunset-iea408-project (npm)
- Aug 14, 2025
Malicious code in lagoon-rose-gpy887-project (npm)
- Aug 14, 2025
Malicious code in lagoon-quasar-ksv190-project (npm)
- Aug 14, 2025
Malicious code in lagoon-oak-njc366-project (npm)
- Aug 14, 2025
Malicious code in lagoon-oak-fex595-project (npm)
- Aug 14, 2025
Malicious code in lagoon-moon-hmy577-project (npm)
- Aug 14, 2025
Malicious code in lagoon-kelp-smx161-project (npm)
- Aug 14, 2025
Malicious code in lagoon-jewel-shr048-project (npm)
- Aug 14, 2025
Malicious code in lagoon-island-lar086-project (npm)
- Aug 14, 2025
Malicious code in lagoon-infinity-iyv611-project (npm)
- Aug 14, 2025
Malicious code in lagoon-icicle-crl222-project (npm)
- Aug 14, 2025
Malicious code in lagoon-hollow-bgf252-project (npm)
- Aug 14, 2025
Malicious code in lagoon-galaxy-ipr289-project (npm)
- Aug 14, 2025
Malicious code in lagoon-evergreen-kwq796-project (npm)
- Aug 14, 2025
Malicious code in lagoon-ant-evs874-project (npm)
- Aug 14, 2025
Malicious code in lagent (npm)
- Aug 14, 2025
Malicious code in ladyphp (npm)
- Aug 14, 2025
Malicious code in laduja (npm)
- Aug 14, 2025
Malicious code in ladenes (npm)
- Aug 14, 2025
Malicious code in ladder-text-js (npm)
- Aug 14, 2025
Malicious code in lacerta-zenobia-magellan-cluster (npm)
- Aug 14, 2025
Malicious code in lacerta-mineralogy-tailwindcss-gemini (npm)
- Aug 14, 2025
Malicious code in lacerta-eris-altair-terser-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in lacalma (npm)
- Aug 14, 2025
Malicious code in labzine (npm)
- Aug 14, 2025
Malicious code in labyrinth_w4a5w_btn55_trill (npm)
- Aug 14, 2025
Malicious code in labyrinth_m44cp_8yf3f_iris (npm)
- Aug 14, 2025
Malicious code in labyrinth_g3mww_aik3j_raven (npm)
- Aug 14, 2025
Malicious code in labyrinth_cjvvv_7pz4t_opaline (npm)
- Aug 14, 2025
Malicious code in labyrinth_bfui4_ymyi6_ivy (npm)
- Aug 14, 2025
Malicious code in labyrinth-volcano-gsh193-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-ufvpn-egdh0-emerald-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-trcek-88blj-celestial-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-savanna-tqb592-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-sapphire-byr950-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-quill-qfk926-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-quartz-bfb310-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-pucpz-0lb6l-utopia-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-nymph-axa394-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-everest-rgd440-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-ecosystem-hdd962-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-coral-bci338-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-cliff-zmj835-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-cascade-hrg076-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-aspen-uzq799-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-albatross-opo606-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-2my8w-67ept-nebula-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-09y80-pq6ds-opal-project (npm)
Page 5956 of 7,326