Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in bramble-r3vhf-u6bkc-coral-project (npm)
- Aug 14, 2025
Malicious code in bramble-llcsm-t16l4-drift-project (npm)
- Aug 14, 2025
Malicious code in bramble-fyq3t-t5g4y-wisp-project (npm)
- Aug 14, 2025
Malicious code in bramble-dgydz-jirme-lake-project (npm)
- Aug 14, 2025
Malicious code in bramble-6g3t9-hh170-moonlight-project (npm)
- Aug 14, 2025
Malicious code in brainshag (npm)
- Aug 14, 2025
Malicious code in braingym (npm)
- Aug 14, 2025
Malicious code in braingames-sergey20x25 (npm)
- Aug 14, 2025
Malicious code in braincrow (npm)
- Aug 14, 2025
Malicious code in braccesca (npm)
- Aug 14, 2025
Malicious code in br45 (npm)
- Aug 14, 2025
Malicious code in bqphkiukdfonavms (npm)
- Aug 14, 2025
Malicious code in bqffer-xor (npm)
- Aug 14, 2025
Malicious code in bqbel (npm)
- Aug 14, 2025
Malicious code in bptqya (npm)
- Aug 14, 2025
Malicious code in bpmn-exec (npm)
- Aug 14, 2025
Malicious code in bpluser (npm)
- Aug 14, 2025
Malicious code in bplascom (npm)
- Aug 14, 2025
Malicious code in bpi66 (npm)
- Aug 14, 2025
Malicious code in bpi39 (npm)
- Aug 14, 2025
Malicious code in bpexample (npm)
- Aug 14, 2025
Malicious code in bpager (npm)
- Aug 14, 2025
Malicious code in bp66 (npm)
- Aug 14, 2025
Malicious code in boykekp (npm)
- Aug 14, 2025
Malicious code in boyblack (npm)
- Aug 14, 2025
Malicious code in boyanglog (npm)
- Aug 14, 2025
Malicious code in boxpress (npm)
- Aug 14, 2025
Malicious code in boxless (npm)
- Aug 14, 2025
Malicious code in boxerjs (npm)
- Aug 14, 2025
Malicious code in boxedin (npm)
- Aug 14, 2025
Malicious code in boxclient (npm)
- Aug 14, 2025
Malicious code in boxcars (npm)
- Aug 14, 2025
Malicious code in bowtie (npm)
- Aug 14, 2025
Malicious code in bowersups (npm)
- Aug 14, 2025
Malicious code in bowee (npm)
- Aug 14, 2025
Malicious code in bowe (npm)
- Aug 14, 2025
Malicious code in bouwapp (npm)
- Aug 14, 2025
Malicious code in boulogne (npm)
- Aug 14, 2025
Malicious code in boulder_qn5rr_a79gb_kismet (npm)
- Aug 14, 2025
Malicious code in boulder_pyfy4_iwe21_reef (npm)
- Aug 14, 2025
Malicious code in boulder_7lb0n_2tscj_atlas (npm)
- Aug 14, 2025
Malicious code in boulder_5ud51_wt1ix_blossom (npm)
- Aug 14, 2025
Malicious code in boulder_0x8tc_bg7u8_yonder (npm)
- Aug 14, 2025
Malicious code in boulder-zenith-skb049-project (npm)
- Aug 14, 2025
Malicious code in boulder-whale-ghj991-project (npm)
- Aug 14, 2025
Malicious code in boulder-tide-bpi689-project (npm)
- Aug 14, 2025
Malicious code in boulder-tb2z4-vn8c6-bison-project (npm)
- Aug 14, 2025
Malicious code in boulder-star-ldg158-project (npm)
- Aug 14, 2025
Malicious code in boulder-rreq7-kekff-tempest-project (npm)
- Aug 14, 2025
Malicious code in boulder-r4sqf-x3f75-nymph-project (npm)
Page 5670 of 6,634