Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in lwc-monorepo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in lua-circuit-breaker (npm)
1 compromised version
- Jun 25, 2024
Malicious code in lp-test-123 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in looleh-ts (npm)
1 compromised version
- Jun 25, 2024
Malicious code in lookerbot (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in lodashinc (npm)
1 compromised version
- Jun 25, 2024
Malicious code in lodash.findlastm (npm)
1 compromised version
- Jun 25, 2024
Malicious code in locker-extention (npm)
1 compromised version
- Jun 25, 2024
Malicious code in load-secrets-action (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in lls-lowcode-utils (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in lll_test_evil (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in lldb-dap (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in llama-fns (npm)
1 compromised version
- Jun 25, 2024
Malicious code in living-on-the-edge (npm)
1 compromised version
- Jun 25, 2024
Malicious code in livebos-frame (npm)
1 compromised version
- Jun 25, 2024
Malicious code in livebos-bridge (npm)
1 compromised version
- Jun 25, 2024
Malicious code in litter-woker (npm)
1 compromised version
- Jun 25, 2024
Malicious code in linkis-website (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in linkinbio-web-components (npm)
1 compromised version
- Jun 25, 2024
Malicious code in link_pinterest (npm)
1 compromised version
- Jun 25, 2024
Malicious code in link-ui-i24n (npm)
1 compromised version
- Jun 25, 2024
Malicious code in link-ui-i23n (npm)
1 compromised version
- Jun 25, 2024
Malicious code in link-ui-i22n (npm)
1 compromised version
- Jun 25, 2024
Malicious code in link-ui-i21n (npm)
1 compromised version
- Jun 25, 2024
Malicious code in link-ui-i20n (npm)
1 compromised version
- Jun 25, 2024
Malicious code in link-ui-i19n (npm)
1 compromised version
- Jun 25, 2024
Malicious code in line-configs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in lifi-contracts (npm)
1 compromised version
- Jun 25, 2024
Malicious code in lifetime-agent (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in libx-amount (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in library.cycle.c (npm)
1 compromised version
- Jun 25, 2024
Malicious code in lib-comdig (npm)
1 compromised version
- Jun 25, 2024
Malicious code in level-legacy (npm)
1 compromised version
- Jun 25, 2024
Malicious code in leo-sf-symbols (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in legacy-web3-extension (npm)
1 compromised version
- Jun 25, 2024
Malicious code in layui.js (npm)
1 compromised version
- Jun 25, 2024
Malicious code in launchdarkly-cpp-server (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in launchdarkly-cpp-internal (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in lastlasttrialllll (npm)
1 compromised version
- Jun 25, 2024
Malicious code in language-selector-content (npm)
1 compromised version
- Jun 25, 2024
Malicious code in language-repo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in lampwirecompete (npm)
1 compromised version
- Jun 25, 2024
Malicious code in lab-npm-package (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in kwaishop-radar (npm)
1 compromised version
- Jun 25, 2024
Malicious code in kwai-pymk (npm)
1 compromised version
- Jun 25, 2024
Malicious code in kuaishou-mmu-web-component (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ksbackgroundtask (npm)
1 compromised version
- Jun 25, 2024
Malicious code in kol-demo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in koi-grid (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in knowledge-admin (npm)
1 compromised version
Page 6703 of 7,293