Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in banana-0p5-project (npm)
- Aug 14, 2025
Malicious code in banana-040-project (npm)
- Aug 14, 2025
Malicious code in bamsas (npm)
- Aug 14, 2025
Malicious code in bamboocha (npm)
- Aug 14, 2025
Malicious code in bamboo-zenith-xxb769-project (npm)
- Aug 14, 2025
Malicious code in bamboo-vortex-sug509-project (npm)
- Aug 14, 2025
Malicious code in bamboo-volcano-qhl400-project (npm)
- Aug 14, 2025
Malicious code in bamboo-quilt-vbx817-project (npm)
- Aug 14, 2025
Malicious code in bamboo-opaline-sbl070-project (npm)
- Aug 14, 2025
Malicious code in bamboo-kiwi-shz441-project (npm)
- Aug 14, 2025
Malicious code in bamboo-island-iaq641-project (npm)
- Aug 14, 2025
Malicious code in bamboo-honey-rmv178-project (npm)
- Aug 14, 2025
Malicious code in bamboo-hedgehog-jsu876-project (npm)
- Aug 14, 2025
Malicious code in bamboo-gorge-axr108-project (npm)
- Aug 14, 2025
Malicious code in bamboo-fox-jcq178-project (npm)
- Aug 14, 2025
Malicious code in bamboo-fox-dhc840-project (npm)
- Aug 14, 2025
Malicious code in bamboo-butterfly-dtt155-project (npm)
- Aug 14, 2025
Malicious code in bambang-ubi8-kuki (npm)
- Aug 14, 2025
Malicious code in bambang-tek48-kuki (npm)
- Aug 14, 2025
Malicious code in bambang-tahu59-sukiwir (npm)
- Aug 14, 2025
Malicious code in bambang-pisang81-breki (npm)
- Aug 14, 2025
Malicious code in bambang-oncom84-breki (npm)
- Aug 14, 2025
Malicious code in bambang-nasiuduk38-sukiwir (npm)
- Aug 14, 2025
Malicious code in bambang-kepok16-kuki (npm)
- Aug 14, 2025
Malicious code in bambang-gulai24-sukiwir (npm)
- Aug 14, 2025
Malicious code in bambang-gepuk23-sukiwir (npm)
- Aug 14, 2025
Malicious code in bambang-empal37-breki (npm)
- Aug 14, 2025
Malicious code in bam-barchart-list (npm)
- Aug 14, 2025
Malicious code in balpissue (npm)
- Aug 14, 2025
Malicious code in balloons (npm)
- Aug 14, 2025
Malicious code in ballast (npm)
- Aug 14, 2025
Malicious code in balance-rho-resolve-alpha-uglify (npm)
- Aug 14, 2025
Malicious code in balance-chi-decompress-chi-code (npm)
- Aug 14, 2025
Malicious code in baker-utils (npm)
- Aug 14, 2025
Malicious code in baker-services (npm)
- Aug 14, 2025
Malicious code in bakaloria (npm)
- Aug 14, 2025
Malicious code in baidutop (npm)
- Aug 14, 2025
Malicious code in baiauto (npm)
- Aug 14, 2025
Malicious code in bai2-generator (npm)
- Aug 14, 2025
Malicious code in bahrain (npm)
- Aug 14, 2025
Malicious code in baes-x (npm)
- Aug 14, 2025
Malicious code in baehello (npm)
- Aug 14, 2025
Malicious code in badvideo (npm)
- Aug 14, 2025
Malicious code in badgnet (npm)
- Aug 14, 2025
Malicious code in bad-spy-shell-report-assert (npm)
- Aug 14, 2025
Malicious code in bad-idea-express-backdoor (npm)
- Aug 14, 2025
Malicious code in bad-catch-stack-compile-query (npm)
- Aug 14, 2025
Malicious code in backupvbs (npm)
- Aug 14, 2025
Malicious code in backupish (npm)
- Aug 14, 2025
Malicious code in backup-decryptor (npm)
Page 5684 of 6,634