Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in betlab-common-auth (npm)
- Aug 14, 2025
Malicious code in betlab-common (npm)
- Aug 14, 2025
Malicious code in betelgeuse-sirius-helios-elara (npm)
- Aug 14, 2025
Malicious code in betelgeuse-phenomic-warp-kuiperbelt (npm)
- Aug 14, 2025
Malicious code in betelgeuse-paleomagnetism-airbnb-dione (npm)
- Aug 14, 2025
Malicious code in betelgeuse-juno-mantle-init (npm)
- Aug 14, 2025
Malicious code in betelgeuse-interferometry-meteor-wasat (npm)
- Aug 14, 2025
Malicious code in betbaws (npm)
- Aug 14, 2025
Malicious code in betazinha (npm)
- Aug 14, 2025
Malicious code in betaglide (npm)
- Aug 14, 2025
Malicious code in betabulls (npm)
- Aug 14, 2025
Malicious code in beta-epsilon-unix-emulate-spy (npm)
- Aug 14, 2025
Malicious code in beta-decompress-daemon-minify-simple (npm)
- Aug 14, 2025
Malicious code in bestfps (npm)
- Aug 14, 2025
Malicious code in bestecars (npm)
- Aug 14, 2025
Malicious code in bestbay (npm)
- Aug 14, 2025
Malicious code in best-team-test (npm)
- Aug 14, 2025
Malicious code in bespoke-webpack (npm)
- Aug 14, 2025
Malicious code in bespoke-highlight (npm)
- Aug 14, 2025
Malicious code in bespin-connect (npm)
- Aug 14, 2025
Malicious code in berrysub (npm)
- Aug 14, 2025
Malicious code in bereket (npm)
- Aug 14, 2025
Malicious code in ber3 (npm)
- Aug 14, 2025
Malicious code in bephztivxlwmgksk (npm)
- Aug 14, 2025
Malicious code in benjiql (npm)
- Aug 14, 2025
Malicious code in benguigui (npm)
- Aug 14, 2025
Malicious code in benelist (npm)
- Aug 14, 2025
Malicious code in benchmark-epsilon-runtime-authenticate-slow (npm)
- Aug 14, 2025
Malicious code in benchmark-deserialize-mu-epsilon-shell (npm)
- Aug 14, 2025
Malicious code in bemutato (npm)
- Aug 14, 2025
Malicious code in bemjst (npm)
- Aug 14, 2025
Malicious code in bem-page-object (npm)
- Aug 14, 2025
Malicious code in beltful (npm)
- Aug 14, 2025
Malicious code in belmgr-plugins (npm)
- Aug 14, 2025
Malicious code in bellatrix-quantum-computing-non-blocking-package (npm)
- Aug 14, 2025
Malicious code in bellatrix-proxima-xenos-mantle (npm)
- Aug 14, 2025
Malicious code in bellatrix-paleoecology-gammarayburst-orbit (npm)
- Aug 14, 2025
Malicious code in bellatrix-mocha-eridanus-gridsome (npm)
- Aug 14, 2025
Malicious code in bellatrix-middleware-update-uglify-js (npm)
- Aug 14, 2025
Malicious code in bellatrix-equinox-commitizen-cors (npm)
- Aug 14, 2025
Malicious code in bellatrix-dagda-readable-chalk (npm)
- Aug 14, 2025
Malicious code in bellajohn (npm)
- Aug 14, 2025
Malicious code in bella-serimuka92-kuki (npm)
- Aug 14, 2025
Malicious code in bella-sambel42-breki (npm)
- Aug 14, 2025
Malicious code in bella-rojak32-sukiwir (npm)
- Aug 14, 2025
Malicious code in bella-pisang17-breki (npm)
- Aug 14, 2025
Malicious code in beliefbox (npm)
- Aug 14, 2025
Malicious code in belgacall (npm)
- Aug 14, 2025
Malicious code in belasitsa (npm)
- Aug 14, 2025
Malicious code in beishanxueyuan-npm-test (npm)
Page 5679 of 6,634