Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in begin.com (npm)
- Aug 14, 2025
Malicious code in beffer-xor (npm)
- Aug 14, 2025
Malicious code in beetroot-mushroom-sxe9 (npm)
- Aug 14, 2025
Malicious code in beetroot-moat-k182 (npm)
- Aug 14, 2025
Malicious code in beetroot-larch-6wls (npm)
- Aug 14, 2025
Malicious code in beetroot-kilo-pzgr (npm)
- Aug 14, 2025
Malicious code in beetroot-kangaroo-chqs (npm)
- Aug 14, 2025
Malicious code in beetlebug (npm)
- Aug 14, 2025
Malicious code in beeter (npm)
- Aug 14, 2025
Malicious code in beerquest (npm)
- Aug 14, 2025
Malicious code in beepak (npm)
- Aug 14, 2025
Malicious code in beefight (npm)
- Aug 14, 2025
Malicious code in bedriemir (npm)
- Aug 14, 2025
Malicious code in bedazzler (npm)
- Aug 14, 2025
Malicious code in beckys (npm)
- Aug 14, 2025
Malicious code in bechdel (npm)
- Aug 14, 2025
Malicious code in beaver-logger-paypal (npm)
- Aug 14, 2025
Malicious code in beamlee (npm)
- Aug 14, 2025
Malicious code in beam-widgets (npm)
- Aug 14, 2025
Malicious code in beam-frontend (npm)
- Aug 14, 2025
Malicious code in beag.ly (npm)
- Aug 14, 2025
Malicious code in beaconlib (npm)
- Aug 14, 2025
Malicious code in be-kanban-eventbase-importer (npm)
- Aug 14, 2025
Malicious code in bdxetqjsgphvionz (npm)
- Aug 14, 2025
Malicious code in bdfg44 (npm)
- Aug 14, 2025
Malicious code in bdfg43 (npm)
- Aug 14, 2025
Malicious code in bdce3 (npm)
- Aug 14, 2025
Malicious code in bd-header-component (npm)
- Aug 14, 2025
Malicious code in bcpicker (npm)
- Aug 14, 2025
Malicious code in bconi (npm)
- Aug 14, 2025
Malicious code in bcmjgvpqrtdaohek (npm)
- Aug 14, 2025
Malicious code in bcion (npm)
- Aug 14, 2025
Malicious code in bcfinal (npm)
- Aug 14, 2025
Malicious code in bby-page-objects (npm)
- Aug 14, 2025
Malicious code in bbr3 (npm)
- Aug 14, 2025
Malicious code in bbos (npm)
- Aug 14, 2025
Malicious code in bbitsdemo (npm)
- Aug 14, 2025
Malicious code in bbf4 (npm)
- Aug 14, 2025
Malicious code in bber (npm)
- Aug 14, 2025
Malicious code in bbbre (npm)
- Aug 14, 2025
Malicious code in bbbr3 (npm)
- Aug 14, 2025
Malicious code in bbbgit (npm)
- Aug 14, 2025
Malicious code in bb4sa (npm)
- Aug 14, 2025
Malicious code in bb-docs-dgeni (npm)
- Aug 14, 2025
Malicious code in bb-builder (npm)
- Aug 14, 2025
Malicious code in bb-babelfish-format (npm)
- Aug 14, 2025
Malicious code in bayu-tempe86-breki (npm)
- Aug 14, 2025
Malicious code in bayu-tempe42-kuki (npm)
- Aug 14, 2025
Malicious code in bayu-oblok19-sukiwir (npm)
- Aug 14, 2025
Malicious code in bayu-lumpur41-breki (npm)
Page 5680 of 6,634