Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in build-extremophile-hermes-mysql (npm)
- Aug 14, 2025
Malicious code in build-dendrochronology-meteor-rollup (npm)
- Aug 14, 2025
Malicious code in build-airbnb-parallax-pegasus (npm)
- Aug 14, 2025
Malicious code in buhealth (npm)
- Aug 14, 2025
Malicious code in bugrose (npm)
- Aug 14, 2025
Malicious code in buggyweb (npm)
- Aug 14, 2025
Malicious code in buggui (npm)
- Aug 14, 2025
Malicious code in bugfer-xor (npm)
- Aug 14, 2025
Malicious code in bufver-xor (npm)
- Aug 14, 2025
Malicious code in bufner-xor (npm)
- Aug 14, 2025
Malicious code in bufger-xor (npm)
- Aug 14, 2025
Malicious code in buffur-xor (npm)
- Aug 14, 2025
Malicious code in buffmr-xor (npm)
- Aug 14, 2025
Malicious code in buffgr-xor (npm)
- Aug 14, 2025
Malicious code in buffez-xor (npm)
- Aug 14, 2025
Malicious code in buffev-xor (npm)
- Aug 14, 2025
Malicious code in buffes-xor (npm)
- Aug 14, 2025
Malicious code in buffermxor (npm)
- Aug 14, 2025
Malicious code in buffered-logger-heroku (npm)
- Aug 14, 2025
Malicious code in buffer-zor (npm)
- Aug 14, 2025
Malicious code in buffer-yor (npm)
- Aug 14, 2025
Malicious code in buffer-xoz (npm)
- Aug 14, 2025
Malicious code in buffer-xov (npm)
- Aug 14, 2025
Malicious code in buffer-xos (npm)
- Aug 14, 2025
Malicious code in buffer-xop (npm)
- Aug 14, 2025
Malicious code in buffer-xob (npm)
- Aug 14, 2025
Malicious code in buffer-xo2 (npm)
- Aug 14, 2025
Malicious code in buffer-xnr (npm)
- Aug 14, 2025
Malicious code in buffer-xmr (npm)
- Aug 14, 2025
Malicious code in buffer-xkr (npm)
- Aug 14, 2025
Malicious code in buffer-xgr (npm)
- Aug 14, 2025
Malicious code in buffer-por (npm)
- Aug 14, 2025
Malicious code in buffer-nodejs-fomalhaut-fetch (npm)
- Aug 14, 2025
Malicious code in buffer-nightmare-uglify-js-dendrochronology (npm)
- Aug 14, 2025
Malicious code in buffer-hor (npm)
- Aug 14, 2025
Malicious code in buffer-fetch-lepton-nconf (npm)
- Aug 14, 2025
Malicious code in buffer-enif-xerxes-spectroscopy (npm)
- Aug 14, 2025
Malicious code in buffer-deneb-less-protractor (npm)
- Aug 14, 2025
Malicious code in buffer-castor-meissa-standard (npm)
- Aug 14, 2025
Malicious code in buffer-8or (npm)
- Aug 14, 2025
Malicious code in buffep-xor (npm)
- Aug 14, 2025
Malicious code in buffeb-xor (npm)
- Aug 14, 2025
Malicious code in buffe2-xor (npm)
- Aug 14, 2025
Malicious code in buffdr-xor (npm)
- Aug 14, 2025
Malicious code in buffar-xor (npm)
- Aug 14, 2025
Malicious code in buffalo-unicorn-qxx704-project (npm)
- Aug 14, 2025
Malicious code in buffalo-rose-jzs105-project (npm)
- Aug 14, 2025
Malicious code in buffalo-peacock-fdm255-project (npm)
- Aug 14, 2025
Malicious code in buffalo-nugget-cgu855-project (npm)
- Aug 14, 2025
Malicious code in buffalo-nocturne-jlg255-project (npm)
Page 5665 of 6,634