Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in buffalo-mist-bgq796-project (npm)
- Aug 14, 2025
Malicious code in buffalo-kaleidoscope-mbd496-project (npm)
- Aug 14, 2025
Malicious code in buffalo-jewel-xnd603-project (npm)
- Aug 14, 2025
Malicious code in buffalo-icicle-pax286-project (npm)
- Aug 14, 2025
Malicious code in buffalo-icicle-byp091-project (npm)
- Aug 14, 2025
Malicious code in buffalo-dragon-atg941-project (npm)
- Aug 14, 2025
Malicious code in buffalo-cascade-vaw996-project (npm)
- Aug 14, 2025
Malicious code in buffalo-butterfly-asy046-project (npm)
- Aug 14, 2025
Malicious code in buffalo-asteroid-ptp801-project (npm)
- Aug 14, 2025
Malicious code in bufder-xor (npm)
- Aug 14, 2025
Malicious code in bufber-xor (npm)
- Aug 14, 2025
Malicious code in buenas (npm)
- Aug 14, 2025
Malicious code in budi-lumpur85-sukiwir (npm)
- Aug 14, 2025
Malicious code in budi-enting59-breki (npm)
- Aug 14, 2025
Malicious code in budgames (npm)
- Aug 14, 2025
Malicious code in budfer-xor (npm)
- Aug 14, 2025
Malicious code in budafly (npm)
- Aug 14, 2025
Malicious code in bud-live-server (npm)
- Aug 14, 2025
Malicious code in bud-indexhtml (npm)
- Aug 14, 2025
Malicious code in bud-concat (npm)
- Aug 14, 2025
Malicious code in bud-browserify (npm)
- Aug 14, 2025
Malicious code in bud-babelify (npm)
- Aug 14, 2025
Malicious code in bucketpdf-test (npm)
- Aug 14, 2025
Malicious code in bucketpdf (npm)
- Aug 14, 2025
Malicious code in buceutils (npm)
- Aug 14, 2025
Malicious code in buc-utils (npm)
- Aug 14, 2025
Malicious code in bubfer-xor (npm)
- Aug 14, 2025
Malicious code in BubbleJS (npm)
- Aug 14, 2025
Malicious code in btyu64 (npm)
- Aug 14, 2025
Malicious code in btyr5 (npm)
- Aug 14, 2025
Malicious code in btt44 (npm)
- Aug 14, 2025
Malicious code in bts_shared (npm)
- Aug 14, 2025
Malicious code in btransfer (npm)
- Aug 14, 2025
Malicious code in btr4 (npm)
- Aug 14, 2025
Malicious code in btooom (npm)
- Aug 14, 2025
Malicious code in btheme (npm)
- Aug 14, 2025
Malicious code in btffer-xor (npm)
- Aug 14, 2025
Malicious code in btfbapp (npm)
- Aug 14, 2025
Malicious code in btcsim (npm)
- Aug 14, 2025
Malicious code in bsplugin (npm)
- Aug 14, 2025
Malicious code in bsplib (npm)
- Aug 14, 2025
Malicious code in bshtest (npm)
- Aug 14, 2025
Malicious code in bsgqtkfrjhawniyk (npm)
- Aug 14, 2025
Malicious code in bsgiowrmnkhjzktx (npm)
- Aug 14, 2025
Malicious code in bsergi (npm)
- Aug 14, 2025
Malicious code in bsae-x (npm)
- Aug 14, 2025
Malicious code in bsa-contract (npm)
- Aug 14, 2025
Malicious code in bs85check (npm)
- Aug 14, 2025
Malicious code in bs85 (npm)
- Aug 14, 2025
Malicious code in bs58chekc (npm)
Page 5666 of 6,634