Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in bootes-innercore-ichnology-npm (npm)
- Aug 14, 2025
Malicious code in bootes-frontend-proxima-genomics (npm)
- Aug 14, 2025
Malicious code in bootes-fetch-eclipse-aether (npm)
- Aug 14, 2025
Malicious code in bootes-chromedriver-dynamo-protractor (npm)
- Aug 14, 2025
Malicious code in bootclass (npm)
- Aug 14, 2025
Malicious code in bootboot (npm)
- Aug 14, 2025
Malicious code in bootband (npm)
- Aug 14, 2025
Malicious code in boopathi (npm)
- Aug 14, 2025
Malicious code in boomtak (npm)
- Aug 14, 2025
Malicious code in boolean-theta-static-sudo-node (npm)
- Aug 14, 2025
Malicious code in booksuite (npm)
- Aug 14, 2025
Malicious code in bookopen (npm)
- Aug 14, 2025
Malicious code in booknow (npm)
- Aug 14, 2025
Malicious code in bookingc (npm)
- Aug 14, 2025
Malicious code in bookatrip (npm)
- Aug 14, 2025
Malicious code in book-user-process-protected-execute (npm)
- Aug 14, 2025
Malicious code in book-short-grid-benchmark-route (npm)
- Aug 14, 2025
Malicious code in book-alpha-byte-xi-omicron (npm)
- Aug 14, 2025
Malicious code in boogeyman (npm)
- Aug 14, 2025
Malicious code in bonvalsyn (npm)
- Aug 14, 2025
Malicious code in bonteng (npm)
- Aug 14, 2025
Malicious code in bonsaits (npm)
- Aug 14, 2025
Malicious code in bonsailib (npm)
- Aug 14, 2025
Malicious code in bongos (npm)
- Aug 14, 2025
Malicious code in bonfire-umbrella-tsh129-project (npm)
- Aug 14, 2025
Malicious code in bonfire-pinnacle-byu239-project (npm)
- Aug 14, 2025
Malicious code in bonfire-hill-fjz601-project (npm)
- Aug 14, 2025
Malicious code in bonfire-gorge-ncg364-project (npm)
- Aug 14, 2025
Malicious code in bonfire-glacier-poe104-project (npm)
- Aug 14, 2025
Malicious code in bonfire-everest-ede478-project (npm)
- Aug 14, 2025
Malicious code in bonfire-dragon-xjp200-project (npm)
- Aug 14, 2025
Malicious code in bonfire-arctic-jzf710-project (npm)
- Aug 14, 2025
Malicious code in bonfire-albatross-laa872-project (npm)
- Aug 14, 2025
Malicious code in bonez (npm)
- Aug 14, 2025
Malicious code in bonavolvo (npm)
- Aug 14, 2025
Malicious code in bonanzaslot (npm)
- Aug 14, 2025
Malicious code in bolsos (npm)
- Aug 14, 2025
Malicious code in bollman (npm)
- Aug 14, 2025
Malicious code in bolcsi (npm)
- Aug 14, 2025
Malicious code in bokehhh (npm)
- Aug 14, 2025
Malicious code in Boilerpipe-Scraper (npm)
- Aug 14, 2025
Malicious code in boiidash (npm)
- Aug 14, 2025
Malicious code in boidssim (npm)
- Aug 14, 2025
Malicious code in bohemiaa (npm)
- Aug 14, 2025
Malicious code in bogbuk (npm)
- Aug 14, 2025
Malicious code in boehmtest (npm)
- Aug 14, 2025
Malicious code in bodyfuel (npm)
- Aug 14, 2025
Malicious code in body-parse-xml (npm)
- Aug 14, 2025
Malicious code in boc1dk (npm)
- Aug 14, 2025
Malicious code in boby_parser (npm)
3 compromised versions
Page 5672 of 6,634