Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in blkargufqimctnwy (npm)
- Aug 14, 2025
Malicious code in blitz-stream-convict-webdriverio (npm)
- Aug 14, 2025
Malicious code in blitz-standard-mongoose-astrobiology (npm)
- Aug 14, 2025
Malicious code in blitz-colors-abiogenesis-augmentedreality (npm)
- Aug 14, 2025
Malicious code in bliss-ivory-ene692-project (npm)
- Aug 14, 2025
Malicious code in blippress (npm)
- Aug 14, 2025
Malicious code in blipbot (npm)
- Aug 14, 2025
Malicious code in blimps (npm)
- Aug 14, 2025
Malicious code in blendish (npm)
- Aug 14, 2025
Malicious code in blending (npm)
- Aug 14, 2025
Malicious code in blaze-ui-components-site (npm)
- Aug 14, 2025
Malicious code in blaze-release-it-morgan-biosignature (npm)
- Aug 14, 2025
Malicious code in blaze-quantumfoam-nconf-global (npm)
- Aug 14, 2025
Malicious code in blaze-optimize-css-assets-webpack-plugin-cosmogenic-joviology (npm)
- Aug 14, 2025
Malicious code in blaze-dotenv-parse-variables-spawn-foundation (npm)
- Aug 14, 2025
Malicious code in blazar-vuepress-exoplanet-meissa (npm)
- Aug 14, 2025
Malicious code in blazar-transport-webdriver-manager-dependencies (npm)
- Aug 14, 2025
Malicious code in blazar-non-blocking-dotenv-parse-variables-test (npm)
- Aug 14, 2025
Malicious code in blazar-comet-toml-resolvers (npm)
- Aug 14, 2025
Malicious code in blauen (npm)
- Aug 14, 2025
Malicious code in blank-ts-monorepo-common (npm)
- Aug 14, 2025
Malicious code in blank-slate (npm)
- Aug 14, 2025
Malicious code in blanchea (npm)
- Aug 14, 2025
Malicious code in blalab (npm)
- Aug 14, 2025
Malicious code in blagsite (npm)
- Aug 14, 2025
Malicious code in blagcast (npm)
- Aug 14, 2025
Malicious code in blackpanda (npm)
- Aug 14, 2025
Malicious code in blackme (npm)
- Aug 14, 2025
Malicious code in blacklisted_credentials_client (npm)
- Aug 14, 2025
Malicious code in blackhole-unuk-brane-semantic-release (npm)
- Aug 14, 2025
Malicious code in blackhole-underpass-8jop (npm)
- Aug 14, 2025
Malicious code in blackhole-quarry-oqot (npm)
- Aug 14, 2025
Malicious code in blackhole-parsnip-fsho (npm)
- Aug 14, 2025
Malicious code in blackhole-module-rimraf-xenon (npm)
- Aug 14, 2025
Malicious code in blackhole-moat-6ioc (npm)
- Aug 14, 2025
Malicious code in blackhole-mensa-chromedriver-hermes (npm)
- Aug 14, 2025
Malicious code in blackhole-maple-n0tm (npm)
- Aug 14, 2025
Malicious code in blackhole-kayak-zutj (npm)
- Aug 14, 2025
Malicious code in blackhole-hyperion-jwt-command (npm)
- Aug 14, 2025
Malicious code in blackhole-cygnus-phenomic-miranda (npm)
- Aug 14, 2025
Malicious code in blackhole-castle-bj95 (npm)
- Aug 14, 2025
Malicious code in blackhole-beetroot-ve6x (npm)
- Aug 14, 2025
Malicious code in blabberui (npm)
- Aug 14, 2025
Malicious code in blaast-web (npm)
- Aug 14, 2025
Malicious code in blaast-invoker (npm)
- Aug 14, 2025
Malicious code in blaast-deploy (npm)
- Aug 14, 2025
Malicious code in bkdate (npm)
- Aug 14, 2025
Malicious code in bkdajucmnvhkyizw (npm)
- Aug 14, 2025
Malicious code in bk11 (npm)
- Aug 14, 2025
Malicious code in bjuqewotfnsrgdmh (npm)
Page 5675 of 6,634