Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in bravo-raspberry-iidm (npm)
- Aug 14, 2025
Malicious code in bravo-quokka-lb7o (npm)
- Aug 14, 2025
Malicious code in bravo-pmw-project (npm)
- Aug 14, 2025
Malicious code in bravo-papaya-romeo-rkkib (npm)
- Aug 14, 2025
Malicious code in bravo-papaya-qdcu (npm)
- Aug 14, 2025
Malicious code in bravo-papa-ugli-khtch (npm)
- Aug 14, 2025
Malicious code in bravo-orange-xiji (npm)
- Aug 14, 2025
Malicious code in bravo-orange-rugh (npm)
- Aug 14, 2025
Malicious code in bravo-orange-lvmt (npm)
- Aug 14, 2025
Malicious code in bravo-nii-project (npm)
- Aug 14, 2025
Malicious code in bravo-n3f-project (npm)
- Aug 14, 2025
Malicious code in bravo-kiwi-rcww (npm)
- Aug 14, 2025
Malicious code in bravo-kilo-voon (npm)
- Aug 14, 2025
Malicious code in bravo-kilo-tdaz (npm)
- Aug 14, 2025
Malicious code in bravo-juliet-hiaj (npm)
- Aug 14, 2025
Malicious code in bravo-iwm-project (npm)
- Aug 14, 2025
Malicious code in bravo-igloo-22dx (npm)
- Aug 14, 2025
Malicious code in bravo-hotel-papaya-bokyh (npm)
- Aug 14, 2025
Malicious code in bravo-honeydew-btbd (npm)
- Aug 14, 2025
Malicious code in bravo-he1-project (npm)
- Aug 14, 2025
Malicious code in bravo-gox-project (npm)
- Aug 14, 2025
Malicious code in bravo-golf-fvcu (npm)
- Aug 14, 2025
Malicious code in bravo-foxtrot-kxcw (npm)
- Aug 14, 2025
Malicious code in bravo-fmj-project (npm)
- Aug 14, 2025
Malicious code in bravo-elephant-9ap0 (npm)
- Aug 14, 2025
Malicious code in bravo-echo-quebec-rzkmc (npm)
- Aug 14, 2025
Malicious code in bravo-date-dejy (npm)
- Aug 14, 2025
Malicious code in bravo-charlie-kxid (npm)
- Aug 14, 2025
Malicious code in bravo-beetroot-qb8f (npm)
- Aug 14, 2025
Malicious code in bravo-banana-vach (npm)
- Aug 14, 2025
Malicious code in bravo-arx-project (npm)
- Aug 14, 2025
Malicious code in bravo-apple-vtwd (npm)
- Aug 14, 2025
Malicious code in bravo-apple-i6t1 (npm)
- Aug 14, 2025
Malicious code in bravo-9yt-project (npm)
- Aug 14, 2025
Malicious code in bravo-9gz-project (npm)
- Aug 14, 2025
Malicious code in bravo-78b-project (npm)
- Aug 14, 2025
Malicious code in bravo-77x-project (npm)
- Aug 14, 2025
Malicious code in bravo-4ib-project (npm)
- Aug 14, 2025
Malicious code in bravo-4db-project (npm)
- Aug 14, 2025
Malicious code in bravo-48z-project (npm)
- Aug 14, 2025
Malicious code in bravo-33u-project (npm)
- Aug 14, 2025
Malicious code in bravo-2s5-project (npm)
- Aug 14, 2025
Malicious code in bravo-1k6-project (npm)
- Aug 14, 2025
Malicious code in brane-pegasus-corvus-rate-limiter (npm)
- Aug 14, 2025
Malicious code in brane-oortcloud-telesto-cosmos (npm)
- Aug 14, 2025
Malicious code in branding-domain-api (npm)
- Aug 14, 2025
Malicious code in brand_controllers (npm)
- Aug 14, 2025
Malicious code in brameda (npm)
- Aug 14, 2025
Malicious code in bramble_a7n1r_62cnt_nectar (npm)
- Aug 14, 2025
Malicious code in bramble-txb6y-b5emg-gale-project (npm)
Page 5669 of 6,634