Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in boulder-opal-klq784-project (npm)
- Aug 14, 2025
Malicious code in boulder-moon-few013-project (npm)
- Aug 14, 2025
Malicious code in boulder-kale-dtl270-project (npm)
- Aug 14, 2025
Malicious code in boulder-island-hkv808-project (npm)
- Aug 14, 2025
Malicious code in boulder-igloo-bzd590-project (npm)
- Aug 14, 2025
Malicious code in boulder-glade-kxk543-project (npm)
- Aug 14, 2025
Malicious code in boulder-falcon-nep288-project (npm)
- Aug 14, 2025
Malicious code in boulder-ecfpi-kkm0i-ember-project (npm)
- Aug 14, 2025
Malicious code in boulder-e16ky-ahxzy-opal-project (npm)
- Aug 14, 2025
Malicious code in boulder-caravan-wix752-project (npm)
- Aug 14, 2025
Malicious code in boulder-butterfly-uff542-project (npm)
- Aug 14, 2025
Malicious code in botprotect-v13 (npm)
- Aug 14, 2025
Malicious code in botomatik (npm)
- Aug 14, 2025
Malicious code in botkit-storage-mongo-updated (npm)
- Aug 14, 2025
Malicious code in botinator (npm)
- Aug 14, 2025
Malicious code in botframework-webchat-styles (npm)
1 compromised version
- Aug 14, 2025
Malicious code in botframework-webchat-react-valibot (npm)
1 compromised version
- Aug 14, 2025
Malicious code in botframework-webchat-base (npm)
1 compromised version
- Aug 14, 2025
Malicious code in botbuilder-js (npm)
- Aug 14, 2025
Malicious code in bot-methods (npm)
- Aug 14, 2025
Malicious code in bot-fb (npm)
- Aug 14, 2025
Malicious code in bot-creator (npm)
- Aug 14, 2025
Malicious code in boson-scorpius-barnard-galaxy (npm)
- Aug 14, 2025
Malicious code in boson-fermion-eslint-config-grunt (npm)
- Aug 14, 2025
Malicious code in boson-epimetheus-pulsar-vulcan (npm)
- Aug 14, 2025
Malicious code in boson-csrf-accretion-stream (npm)
- Aug 14, 2025
Malicious code in bosnobot (npm)
- Aug 14, 2025
Malicious code in bos-fontmin (npm)
- Aug 14, 2025
Malicious code in borneo (npm)
- Aug 14, 2025
Malicious code in borealis-supercluster-chariklo-browserify (npm)
- Aug 14, 2025
Malicious code in borealis-stratosphere-prosthetics-ariel (npm)
- Aug 14, 2025
Malicious code in bootstrap4 (npm)
- Aug 14, 2025
Malicious code in bootstrap.docpad (npm)
- Aug 14, 2025
Malicious code in bootstrap-material-design-datepicker (npm)
- Aug 14, 2025
Malicious code in bootstrap-jabbah-blackhole-dotenv-safe (npm)
- Aug 14, 2025
Malicious code in bootstrap-brane-xo-rest (npm)
- Aug 14, 2025
Malicious code in bootstrap-areology-virtualreality-postcss (npm)
- Aug 14, 2025
Malicious code in bootstrap-arcturus-jupiter-electron-builder (npm)
- Aug 14, 2025
Malicious code in bootstrap-abiogenesis-pegasus-quasar (npm)
- Aug 14, 2025
Malicious code in bootsnap (npm)
- Aug 14, 2025
Malicious code in bootscut (npm)
- Aug 14, 2025
Malicious code in bootpulse (npm)
- Aug 14, 2025
Malicious code in bootmap (npm)
- Aug 14, 2025
Malicious code in bootler-app (npm)
- Aug 14, 2025
Malicious code in bootes-zephyr-polaris-markdownlint (npm)
- Aug 14, 2025
Malicious code in bootes-xenobiology-leda-halley (npm)
- Aug 14, 2025
Malicious code in bootes-uninstall-hawkingradiation-loglevel (npm)
- Aug 14, 2025
Malicious code in bootes-primatology-commitlint-reveal-md (npm)
- Aug 14, 2025
Malicious code in bootes-mutation-eleventy-zephyr (npm)
- Aug 14, 2025
Malicious code in bootes-less-brane-betelgeuse (npm)
Page 5671 of 6,634