Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in bark-car-6zyz (npm)
- Aug 14, 2025
Malicious code in bargebq (npm)
- Aug 14, 2025
Malicious code in barepo (npm)
- Aug 14, 2025
Malicious code in baredee (npm)
- Aug 14, 2025
Malicious code in barebone-component-hero (npm)
- Aug 14, 2025
Malicious code in bare-security-placeholder (npm)
- Aug 14, 2025
Malicious code in barcodeuv (npm)
- Aug 14, 2025
Malicious code in barcode-ognjetina (npm)
- Aug 14, 2025
Malicious code in barco-angular-ui-bootstrap (npm)
- Aug 14, 2025
Malicious code in barbuda (npm)
- Aug 14, 2025
Malicious code in barbipes (npm)
- Aug 14, 2025
Malicious code in baouncing (npm)
- Aug 14, 2025
Malicious code in baobiao (npm)
- Aug 14, 2025
Malicious code in banyan_xz32g_frswp_yarrow (npm)
- Aug 14, 2025
Malicious code in banyan_s1fm5_7gnfe_dawn (npm)
- Aug 14, 2025
Malicious code in banyan_padpp_4o0pv_ivy (npm)
- Aug 14, 2025
Malicious code in banyan_malou_znyeg_willow (npm)
- Aug 14, 2025
Malicious code in banyan_aqd2l_pb0dd_paradise (npm)
- Aug 14, 2025
Malicious code in bantumi (npm)
- Aug 14, 2025
Malicious code in bantlr (npm)
- Aug 14, 2025
Malicious code in bankocr (npm)
- Aug 14, 2025
Malicious code in bank-component-library (npm)
- Aug 14, 2025
Malicious code in banhof (npm)
- Aug 14, 2025
Malicious code in bangscripts-utils (npm)
- Aug 14, 2025
Malicious code in bangscripts-sockets (npm)
- Aug 14, 2025
Malicious code in bangscripts-rest (npm)
- Aug 14, 2025
Malicious code in bangscripts-mongo (npm)
- Aug 14, 2025
Malicious code in bangscripts-grunt (npm)
- Aug 14, 2025
Malicious code in bangscripts-core (npm)
- Aug 14, 2025
Malicious code in bangscripts-cli (npm)
- Aug 14, 2025
Malicious code in bangscripts-angular (npm)
- Aug 14, 2025
Malicious code in bangscripts (npm)
- Aug 14, 2025
Malicious code in bangbom (npm)
- Aug 14, 2025
Malicious code in bandia (npm)
- Aug 14, 2025
Malicious code in bandhu (npm)
- Aug 14, 2025
Malicious code in bananasign-integration (npm)
- Aug 14, 2025
Malicious code in banana-zulu-yam-lvbdb (npm)
- Aug 14, 2025
Malicious code in banana-zeppelin-sryo (npm)
- Aug 14, 2025
Malicious code in banana-z69-project (npm)
- Aug 14, 2025
Malicious code in banana-yam-uewv (npm)
- Aug 14, 2025
Malicious code in banana-xigua-fig-iijvw (npm)
- Aug 14, 2025
Malicious code in banana-wbg-project (npm)
- Aug 14, 2025
Malicious code in banana-watermelon-zgbr (npm)
- Aug 14, 2025
Malicious code in banana-victor-czii (npm)
- Aug 14, 2025
Malicious code in banana-vanilla-etmi (npm)
- Aug 14, 2025
Malicious code in banana-uns-project (npm)
- Aug 14, 2025
Malicious code in banana-uniform-yam-dmykf (npm)
- Aug 14, 2025
Malicious code in banana-tangerine-mango-xfytb (npm)
- Aug 14, 2025
Malicious code in banana-strawberry-kilo-ddulm (npm)
- Aug 14, 2025
Malicious code in banana-rib-project (npm)
Page 5682 of 6,634