Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in bobjollmodal (npm)
- Aug 14, 2025
Malicious code in bobhall (npm)
- Aug 14, 2025
Malicious code in bobbyjoe (npm)
- Aug 14, 2025
Malicious code in boatyard (npm)
- Aug 14, 2025
Malicious code in boatrmi (npm)
- Aug 14, 2025
Malicious code in boardtime (npm)
- Aug 14, 2025
Malicious code in bnrn-test (npm)
- Aug 14, 2025
Malicious code in bnrn-kits (npm)
- Aug 14, 2025
Malicious code in bnrn-gloabal-cli (npm)
- Aug 14, 2025
Malicious code in bnrn-extra (npm)
- Aug 14, 2025
Malicious code in bnrn-cli-test (npm)
- Aug 14, 2025
Malicious code in bnrn-cli-snapshot (npm)
- Aug 14, 2025
Malicious code in bnrn-cli (npm)
- Aug 14, 2025
Malicious code in bnrn (npm)
- Aug 14, 2025
Malicious code in bnog-core (npm)
- Aug 14, 2025
Malicious code in bnext (npm)
- Aug 14, 2025
Malicious code in bndes-ux (npm)
- Aug 14, 2025
Malicious code in bmphide (npm)
- Aug 14, 2025
Malicious code in bmnick (npm)
- Aug 14, 2025
Malicious code in bmatrix (npm)
- Aug 14, 2025
Malicious code in bmagicseo (npm)
- Aug 14, 2025
Malicious code in blynux (npm)
- Aug 14, 2025
Malicious code in blutbad (npm)
- Aug 14, 2025
Malicious code in blurmate (npm)
- Aug 14, 2025
Malicious code in blurbit (npm)
- Aug 14, 2025
Malicious code in blukanoff (npm)
- Aug 14, 2025
Malicious code in bluezone (npm)
- Aug 14, 2025
Malicious code in bluespp (npm)
- Aug 14, 2025
Malicious code in blueshift-winston-run-script-jest (npm)
- Aug 14, 2025
Malicious code in blueshift-hapi-blaze-atlas (npm)
- Aug 14, 2025
Malicious code in bluescale (npm)
- Aug 14, 2025
Malicious code in bluesat (npm)
- Aug 14, 2025
Malicious code in bluepages (npm)
- Aug 14, 2025
Malicious code in BlueOps (npm)
- Aug 14, 2025
Malicious code in BlueOcean (npm)
- Aug 14, 2025
Malicious code in bluemount (npm)
- Aug 14, 2025
Malicious code in bluemix-objstore (npm)
- Aug 14, 2025
Malicious code in bluemate (npm)
- Aug 14, 2025
Malicious code in bluelake (npm)
- Aug 14, 2025
Malicious code in blueibrd (npm)
- Aug 14, 2025
Malicious code in bluehue (npm)
- Aug 14, 2025
Malicious code in blueeyes (npm)
- Aug 14, 2025
Malicious code in bluebutton-hapi (npm)
- Aug 14, 2025
Malicious code in bluebone (npm)
- Aug 14, 2025
Malicious code in bluebird_nwrck_bsmz7_keystone (npm)
- Aug 14, 2025
Malicious code in bluebird_frgh4_inkzu_grove (npm)
- Aug 14, 2025
Malicious code in bluebird_2qjxm_q5erk_solace (npm)
- Aug 14, 2025
Malicious code in bluebin (npm)
- Aug 14, 2025
Malicious code in bluebidr (npm)
- Aug 14, 2025
Malicious code in blubird (npm)
Page 5673 of 6,634