Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in bs58chek (npm)
- Aug 14, 2025
Malicious code in bs58chcek (npm)
- Aug 14, 2025
Malicious code in bs-sha3 (npm)
- Aug 14, 2025
Malicious code in bs-launcher (npm)
- Aug 14, 2025
Malicious code in brycorp (npm)
- Aug 14, 2025
Malicious code in bruxelles (npm)
- Aug 14, 2025
Malicious code in brunobot (npm)
- Aug 14, 2025
Malicious code in bruddy (npm)
- Aug 14, 2025
Malicious code in brte2 (npm)
- Aug 14, 2025
Malicious code in brt53 (npm)
- Aug 14, 2025
Malicious code in brt423 (npm)
- Aug 14, 2025
Malicious code in brt33 (npm)
- Aug 14, 2025
Malicious code in brsnyder (npm)
- Aug 14, 2025
Malicious code in brre3 (npm)
- Aug 14, 2025
Malicious code in brr3 (npm)
- Aug 14, 2025
Malicious code in browzam (npm)
- Aug 14, 2025
Malicious code in browsersync (npm)
- Aug 14, 2025
Malicious code in browserify-writable-antares-tectonophysics (npm)
- Aug 14, 2025
Malicious code in browserify-robotics-loglevel-stratigraphy (npm)
- Aug 14, 2025
Malicious code in browserify-length (npm)
- Aug 14, 2025
Malicious code in browserify-cordelia-chariklo-cli (npm)
- Aug 14, 2025
Malicious code in browserift (npm)
- Aug 14, 2025
Malicious code in browserctl (npm)
- Aug 14, 2025
Malicious code in browser-wrapper (npm)
- Aug 14, 2025
Malicious code in browser-sync-task-runner (npm)
- Aug 14, 2025
Malicious code in browser-readline (npm)
- Aug 14, 2025
Malicious code in browser-html-to-rtf (npm)
- Aug 14, 2025
Malicious code in brook-whirlpool-nir965-project (npm)
- Aug 14, 2025
Malicious code in brook-rainbow-ezj133-project (npm)
- Aug 14, 2025
Malicious code in brook-peony-luh099-project (npm)
- Aug 14, 2025
Malicious code in brook-lightning-cto460-project (npm)
- Aug 14, 2025
Malicious code in brook-leopard-awu297-project (npm)
- Aug 14, 2025
Malicious code in brook-iceberg-njv486-project (npm)
- Aug 14, 2025
Malicious code in brook-hammock-yfw552-project (npm)
- Aug 14, 2025
Malicious code in brook-glade-zuv167-project (npm)
- Aug 14, 2025
Malicious code in brook-galaxy-jxr850-project (npm)
- Aug 14, 2025
Malicious code in brook-dragon-ddp376-project (npm)
- Aug 14, 2025
Malicious code in brook-aspen-jdw189-project (npm)
- Aug 14, 2025
Malicious code in broodrom (npm)
- Aug 14, 2025
Malicious code in broker-web (npm)
- Aug 14, 2025
Malicious code in brogan-paypal (npm)
- Aug 14, 2025
Malicious code in brodie (npm)
- Aug 14, 2025
Malicious code in brobeur (npm)
- Aug 14, 2025
Malicious code in britains (npm)
- Aug 14, 2025
Malicious code in brisk-kismet-wiw904-project (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-user (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-project (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-playerdata (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-permissions (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-group (npm)
Page 5667 of 6,634