Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in butterfly-jewel-fgx060-project (npm)
- Aug 14, 2025
Malicious code in butterfly-jade-bny341-project (npm)
- Aug 14, 2025
Malicious code in butterfly-iceberg-aih781-project (npm)
- Aug 14, 2025
Malicious code in butterfly-hedgehog-gya873-project (npm)
- Aug 14, 2025
Malicious code in butterfly-giraffe-zos554-project (npm)
- Aug 14, 2025
Malicious code in butterfly-galaxy-etp259-project (npm)
- Aug 14, 2025
Malicious code in butterfly-fern-fml329-project (npm)
- Aug 14, 2025
Malicious code in butterfly-cloud-eko980-project (npm)
- Aug 14, 2025
Malicious code in butterfly-acorn-mkw732-project (npm)
- Aug 14, 2025
Malicious code in butterfly-acorn-avm621-project (npm)
- Aug 14, 2025
Malicious code in bussocial (npm)
- Aug 14, 2025
Malicious code in business-account-web-app (npm)
- Aug 14, 2025
Malicious code in buritos (npm)
- Aug 14, 2025
Malicious code in burglar (npm)
- Aug 14, 2025
Malicious code in burgernet (npm)
- Aug 14, 2025
Malicious code in bunyan-yildun-forever-proxima (npm)
- Aug 14, 2025
Malicious code in bunyan-transport-husky-babel (npm)
- Aug 14, 2025
Malicious code in bunyan-taurus-higgs-phoebe (npm)
- Aug 14, 2025
Malicious code in bunyan-sync-css-loader-quasarjet (npm)
- Aug 14, 2025
Malicious code in bunyan-sedna-dorado-dagda (npm)
- Aug 14, 2025
Malicious code in bunyan-mensa-futurology-gridsome (npm)
- Aug 14, 2025
Malicious code in bunyan-exec-bootstrap-cz-conventional-changelog (npm)
- Aug 14, 2025
Malicious code in bunyan-commitlint-upgrade-start (npm)
- Aug 14, 2025
Malicious code in bunker-to-js (npm)
- Aug 14, 2025
Malicious code in bunker-json (npm)
- Aug 14, 2025
Malicious code in bunker-filter (npm)
- Aug 14, 2025
Malicious code in bunker-cat (npm)
- Aug 14, 2025
Malicious code in bunker-cache (npm)
- Aug 14, 2025
Malicious code in bunfer-xor (npm)
- Aug 14, 2025
Malicious code in bundle-typer (npm)
- Aug 14, 2025
Malicious code in bundle-shell-hash-spy-import (npm)
- Aug 14, 2025
Malicious code in bundle-minify-query-void-java (npm)
- Aug 14, 2025
Malicious code in bumengine (npm)
- Aug 14, 2025
Malicious code in bulma-halley-halley-vortex (npm)
- Aug 14, 2025
Malicious code in bulma-fornax-bionics-ionosphere (npm)
- Aug 14, 2025
Malicious code in bulma-dione-celeste-cli (npm)
- Aug 14, 2025
Malicious code in bulma-command-transform-oscillation (npm)
- Aug 14, 2025
Malicious code in bulma-borealis-octans-antares (npm)
- Aug 14, 2025
Malicious code in bulma-async-socketio-commitlint-config-angular (npm)
- Aug 14, 2025
Malicious code in bulledev (npm)
- Aug 14, 2025
Malicious code in bulkdown (npm)
- Aug 14, 2025
Malicious code in bulebird (npm)
- Aug 14, 2025
Malicious code in bukkittty (npm)
- Aug 14, 2025
Malicious code in buildkite-runner (npm)
- Aug 14, 2025
Malicious code in builderscon-session-timer-domain (npm)
- Aug 14, 2025
Malicious code in builderd (npm)
- Aug 14, 2025
Malicious code in builder-new (npm)
- Aug 14, 2025
Malicious code in buildem (npm)
- Aug 14, 2025
Malicious code in build-tectonic-bioinformatics-stratigraphy (npm)
- Aug 14, 2025
Malicious code in build-system (npm)
Page 5664 of 6,634