Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 17, 2026
Malicious code in liquid-bronze-barnacle (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lionwiki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-agufiaagidug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-ayig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lion-grape-atbg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-ayg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid-amber-kiwi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid-crimson-manatee (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-agufiag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lipoas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-agufiaidug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lion-jungle-02k8 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid-gray-booby (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lior-testflow (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid-olive-python (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liquid-c (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-uyg-afayafuyacauicig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lion-orbit-wk7y (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lion-falcon-lrub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linuxfun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-afayafuyacicig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-agfag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linuxjoy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea88 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea89 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-agufiadug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linux-libs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-afayafuyacuicig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-afayig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-afayafuyig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea95 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea99 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linter-coffee-variables (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea9 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-aag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea93 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-afayauyig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linux-heike-rumen (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea86 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linux-bt4-heike-shouce (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea84 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-afayafuycig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea98 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linux-loong64 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linuxiats (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea85 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea97 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea91 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea96 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea82 (npm)
1 compromised version
Page 98 of 7,312