Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,568 total · sorted newest first- Sep 17, 2026
Malicious code in lintang-tea91 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea96 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea82 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linux-ppc64 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-agag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-afayafuyacauicig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea92 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea87 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-agfiag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-afayyig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea83 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linuxrite (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea90 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in linuxdict (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea94 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liobc-ug-afayafuyaicig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea41 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea81 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea42 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea4 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea46 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea38 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea79 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea44 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea51 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea8 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea50 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea77 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea43 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea54 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea71 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea49 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea36 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea68 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea64 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea69 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea6 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea66 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea35 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea56 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea55 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea60 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea67 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea7 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea57 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea34 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea48 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea58 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea70 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lintang-tea40 (npm)
1 compromised version
Page 99 of 7,312