Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 17, 2026
Malicious code in lisa-empal72-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-dradag70-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-botok95-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-dradag54-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-brongkos58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-buburayam38-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-botok34-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-buburayam83-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liruby (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_lungfish_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_slug_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_trout_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_rat_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_lion_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bakwan19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_gayal_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_platypus_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_bison_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bika22-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bakso78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquity2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bakso11-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_panther_dumbs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bika82-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bika52-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bakwan77-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_iguana_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_wildebeest_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_dingo_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bika61-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_tahr_dumbs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_donkey_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_mink_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bakwan91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bakwan64-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bika59-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bakso83-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bika34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_guppy_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-botok44-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bika99-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-asinan10-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid-rose-grouse (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_cat_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_orca_gold-12 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_heron_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_otter_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_bandicoot_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid_cardinal_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lion-vinegar-fpow (npm)
1 compromised version
Page 97 of 7,312