Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in bayu-keraktelor40-sukiwir (npm)
- Aug 14, 2025
Malicious code in bayu-gaplek28-sukiwir (npm)
- Aug 14, 2025
Malicious code in baytech (npm)
- Aug 14, 2025
Malicious code in bayridge (npm)
- Aug 14, 2025
Malicious code in bayonet-js-sdk (npm)
- Aug 14, 2025
Malicious code in baymax-logger (npm)
- Aug 14, 2025
Malicious code in bayesdem (npm)
- Aug 14, 2025
Malicious code in battleaxe (npm)
- Aug 14, 2025
Malicious code in batonbots (npm)
- Aug 14, 2025
Malicious code in batman-rails (npm)
- Aug 14, 2025
Malicious code in batchsms (npm)
- Aug 14, 2025
Malicious code in batarim (npm)
- Aug 14, 2025
Malicious code in basske (npm)
- Aug 14, 2025
Malicious code in basilfca (npm)
- Aug 14, 2025
Malicious code in basil-bot-2k4 (npm)
- Aug 14, 2025
Malicious code in basil-6o1p6-cnqek-sky-project (npm)
- Aug 14, 2025
Malicious code in basicwar (npm)
- Aug 14, 2025
Malicious code in basic-webpack-project (npm)
- Aug 14, 2025
Malicious code in Basic-Material-framework (npm)
- Aug 14, 2025
Malicious code in bashlog (npm)
- Aug 14, 2025
Malicious code in bashdb (npm)
- Aug 14, 2025
Malicious code in bash-good-zero-old-debug (npm)
- Aug 14, 2025
Malicious code in basewp (npm)
- Aug 14, 2025
Malicious code in baseworks (npm)
- Aug 14, 2025
Malicious code in baseui-v10 (npm)
- Aug 14, 2025
Malicious code in basetorte (npm)
- Aug 14, 2025
Malicious code in basecam (npm)
- Aug 14, 2025
Malicious code in base65536gen (npm)
- Aug 14, 2025
Malicious code in base64-paypal (npm)
- Aug 14, 2025
Malicious code in base-upload (npm)
- Aug 14, 2025
Malicious code in base-styles (npm)
- Aug 14, 2025
Malicious code in baryon-spica-async-bootstrap (npm)
- Aug 14, 2025
Malicious code in baryon-ichnology-filament-bunyan (npm)
- Aug 14, 2025
Malicious code in baryon-callisto-wezen-radioastronomy (npm)
- Aug 14, 2025
Malicious code in bartok-script-sdk (npm)
- Aug 14, 2025
Malicious code in bartok-rest-server (npm)
- Aug 14, 2025
Malicious code in bartok-mock-stub (npm)
- Aug 14, 2025
Malicious code in bartok-connector-memory (npm)
- Aug 14, 2025
Malicious code in bartok-common (npm)
- Aug 14, 2025
Malicious code in bartok-cli (npm)
- Aug 14, 2025
Malicious code in barreno (npm)
- Aug 14, 2025
Malicious code in barnard-vuetify-passport-antares (npm)
- Aug 14, 2025
Malicious code in barnard-ini-cryovolcano-build (npm)
- Aug 14, 2025
Malicious code in barnard-bootstrap-aquarius-selenology (npm)
- Aug 14, 2025
Malicious code in bark-quinoa-6fli (npm)
- Aug 14, 2025
Malicious code in bark-hazel-xwh5 (npm)
- Aug 14, 2025
Malicious code in bark-dwarf-1xym (npm)
- Aug 14, 2025
Malicious code in bark-cherry-vvpi (npm)
- Aug 14, 2025
Malicious code in bark-cherry-7id2 (npm)
- Aug 14, 2025
Malicious code in bark-charlie-ed9l (npm)
Page 5681 of 6,634