Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in cache-omega-socket-decrypt-xml (npm)
- Aug 14, 2025
Malicious code in cache-mgt (npm)
- Aug 14, 2025
Malicious code in cache-io-foundation-gammarayburst (npm)
- Aug 14, 2025
Malicious code in cache-emulate-fire-encrypt-cache (npm)
- Aug 14, 2025
Malicious code in cache-cluster-async-gamma-serialize (npm)
- Aug 14, 2025
Malicious code in cache-buffer-relay-troposphere (npm)
- Aug 14, 2025
Malicious code in cabonline-web-career (npm)
- Aug 14, 2025
Malicious code in cabin.city (npm)
- Aug 14, 2025
Malicious code in ca-npm-scripts (npm)
- Aug 14, 2025
Malicious code in c8front (npm)
- Aug 14, 2025
Malicious code in c-squared-system-d3 (npm)
- Aug 14, 2025
Malicious code in bzrflagai (npm)
- Aug 14, 2025
Malicious code in bz-prsp-database-orm (npm)
- Aug 14, 2025
Malicious code in bytel-tag-commander (npm)
- Aug 14, 2025
Malicious code in bytel-oauth (npm)
- Aug 14, 2025
Malicious code in bytel-api (npm)
- Aug 14, 2025
Malicious code in byted-pgc-admin-search (npm)
- Aug 14, 2025
Malicious code in byted-pgc-admin-form (npm)
- Aug 14, 2025
Malicious code in byted-pgc-admin-addoninput (npm)
- Aug 14, 2025
Malicious code in bytebank (npm)
- Aug 14, 2025
Malicious code in byte-void-mock-awk-slow (npm)
- Aug 14, 2025
Malicious code in byte-nu-hot-omega-validate (npm)
- Aug 14, 2025
Malicious code in byte-fast-boolean-dog-air (npm)
- Aug 14, 2025
Malicious code in byte-dog-phi-fire-root (npm)
- Aug 14, 2025
Malicious code in byte-book-import-shell-data (npm)
- Aug 14, 2025
Malicious code in byrons (npm)
- Aug 14, 2025
Malicious code in byheart (npm)
- Aug 14, 2025
Malicious code in byhand (npm)
- Aug 14, 2025
Malicious code in bwts_ui (npm)
- Aug 14, 2025
Malicious code in bwtgithub (npm)
- Aug 14, 2025
Malicious code in bwoscaizmjyrkfnt (npm)
- Aug 14, 2025
Malicious code in bwffer-xor (npm)
- Aug 14, 2025
Malicious code in bvudsmegoaczrwfx (npm)
- Aug 14, 2025
Malicious code in bvttr4 (npm)
- Aug 14, 2025
Malicious code in bvrr4 (npm)
- Aug 14, 2025
Malicious code in bvf42 (npm)
- Aug 14, 2025
Malicious code in bvcodes (npm)
- Aug 14, 2025
Malicious code in buzzoid-app (npm)
- Aug 14, 2025
Malicious code in buzi1 (npm)
- Aug 14, 2025
Malicious code in buvfer-xor (npm)
- Aug 14, 2025
Malicious code in butterfly-zodiac-mcl542-project (npm)
- Aug 14, 2025
Malicious code in butterfly-yawn-laa848-project (npm)
- Aug 14, 2025
Malicious code in butterfly-xerox-teo200-project (npm)
- Aug 14, 2025
Malicious code in butterfly-waterfall-xjk949-project (npm)
- Aug 14, 2025
Malicious code in butterfly-octopus-tef560-project (npm)
- Aug 14, 2025
Malicious code in butterfly-leopard-oiu132-project (npm)
- Aug 14, 2025
Malicious code in butterfly-lagoon-pof293-project (npm)
- Aug 14, 2025
Malicious code in butterfly-lagoon-fuj735-project (npm)
- Aug 14, 2025
Malicious code in butterfly-koala-sic259-project (npm)
- Aug 14, 2025
Malicious code in butterfly-kaleidoscope-vmu084-project (npm)
Page 5663 of 6,634