Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in bigpicture-client (npm)
- Aug 14, 2025
Malicious code in bigdish (npm)
- Aug 14, 2025
Malicious code in bigbank-ui-lab (npm)
- Aug 14, 2025
Malicious code in big-lambda-report-transpile-beta (npm)
- Aug 14, 2025
Malicious code in bidi-utils (npm)
- Aug 14, 2025
Malicious code in bicycle-moat-nqma (npm)
- Aug 14, 2025
Malicious code in bicycle-jungle-ajk4 (npm)
- Aug 14, 2025
Malicious code in bicycle-echo-g9bp (npm)
- Aug 14, 2025
Malicious code in bictore-lib (npm)
- Aug 14, 2025
Malicious code in bictoinjs-lib (npm)
- Aug 14, 2025
Malicious code in bictoind-rpc (npm)
- Aug 14, 2025
Malicious code in bictoin-ops (npm)
- Aug 14, 2025
Malicious code in biclique (npm)
- Aug 14, 2025
Malicious code in bichart (npm)
- Aug 14, 2025
Malicious code in biaozhika (npm)
- Aug 14, 2025
Malicious code in biagio (npm)
- Aug 14, 2025
Malicious code in bhoupaxkqdkrwems (npm)
- Aug 14, 2025
Malicious code in bhokal (npm)
- Aug 14, 2025
Malicious code in bhmusic (npm)
- Aug 14, 2025
Malicious code in bhjyt5 (npm)
- Aug 14, 2025
Malicious code in bh-elements (npm)
- Aug 14, 2025
Malicious code in bgrt4s (npm)
- Aug 14, 2025
Malicious code in bgnukes (npm)
- Aug 14, 2025
Malicious code in bggtest (npm)
- Aug 14, 2025
Malicious code in bgdrupal (npm)
- Aug 14, 2025
Malicious code in bg665 (npm)
- Aug 14, 2025
Malicious code in bg524 (npm)
- Aug 14, 2025
Malicious code in bg-react-redux (npm)
- Aug 14, 2025
Malicious code in bfyr3 (npm)
- Aug 14, 2025
Malicious code in bfy32 (npm)
- Aug 14, 2025
Malicious code in bftry4 (npm)
- Aug 14, 2025
Malicious code in bfrd344 (npm)
- Aug 14, 2025
Malicious code in bfr44 (npm)
- Aug 14, 2025
Malicious code in bflist (npm)
- Aug 14, 2025
Malicious code in bfingers (npm)
- Aug 14, 2025
Malicious code in bfgt4423 (npm)
- Aug 14, 2025
Malicious code in bfgr34 (npm)
- Aug 14, 2025
Malicious code in bfgr3 (npm)
- Aug 14, 2025
Malicious code in bfgfvh (npm)
- Aug 14, 2025
Malicious code in bfg44 (npm)
- Aug 14, 2025
Malicious code in bfer4 (npm)
- Aug 14, 2025
Malicious code in bfdgf4 (npm)
- Aug 14, 2025
Malicious code in bfcrowd (npm)
- Aug 14, 2025
Malicious code in bf44 (npm)
- Aug 14, 2025
Malicious code in bf-crc (npm)
- Aug 14, 2025
Malicious code in beyblade (npm)
- Aug 14, 2025
Malicious code in bexlanphp (npm)
- Aug 14, 2025
Malicious code in bexio-teststyleguide (npm)
- Aug 14, 2025
Malicious code in betterga (npm)
- Aug 14, 2025
Malicious code in betsense-frontend (npm)
Page 5678 of 6,634