Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in backroute (npm)
- Aug 14, 2025
Malicious code in backoff2 (npm)
- Aug 14, 2025
Malicious code in backmain (npm)
- Aug 14, 2025
Malicious code in background-image (npm)
- Aug 14, 2025
Malicious code in backend-titan-solarnebula-epigenetics (npm)
- Aug 14, 2025
Malicious code in backend-sagitta-tethys-heliophysics (npm)
- Aug 14, 2025
Malicious code in backend-odin-parcel-meteor (npm)
- Aug 14, 2025
Malicious code in backend-eclipse-taurus-charon (npm)
- Aug 14, 2025
Malicious code in backblaze-frameio-common (npm)
- Aug 14, 2025
Malicious code in bable-loader (npm)
- Aug 14, 2025
Malicious code in babl (npm)
- Aug 14, 2025
Malicious code in babez-jij (npm)
- Aug 14, 2025
Malicious code in babel-sirius-extremophile-hermes (npm)
- Aug 14, 2025
Malicious code in babel-sequelize-pipe-volcanology (npm)
- Aug 14, 2025
Malicious code in babel-pulsar-eventhoriz-kaus (npm)
- Aug 14, 2025
Malicious code in babel-preset-webpack-es2015 (npm)
- Aug 14, 2025
Malicious code in babel-preset-tedium (npm)
- Aug 14, 2025
Malicious code in babel-preset-pp-react (npm)
- Aug 14, 2025
Malicious code in babel-preset-modern (npm)
- Aug 14, 2025
Malicious code in babel-preset-env-cx (npm)
- Aug 14, 2025
Malicious code in babel-preset-env-2 (npm)
- Aug 14, 2025
Malicious code in babel-preset-data-ui (npm)
- Aug 14, 2025
Malicious code in babel-preset-animoto-components (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-raptor-template (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-raptor-renderer (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-raptor-class (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-inject-template (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-html-template (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-decorator-props (npm)
- Aug 14, 2025
Malicious code in babel-plugin-throws-helper (npm)
- Aug 14, 2025
Malicious code in babel-plugin-template-literals-qos (npm)
- Aug 14, 2025
Malicious code in babel-plugin-tedium (npm)
- Aug 14, 2025
Malicious code in babel-plugin-server-remove (npm)
- Aug 14, 2025
Malicious code in babel-plugin-mail-transform-inline-imports-commonjs (npm)
- Aug 14, 2025
Malicious code in babel-pal (npm)
- Aug 14, 2025
Malicious code in babel-npm-publish (npm)
- Aug 14, 2025
Malicious code in babel-npm-install (npm)
- Aug 14, 2025
Malicious code in babel-node (npm)
- Aug 14, 2025
Malicious code in babel-magnetar-solarnebula-capella (npm)
- Aug 14, 2025
Malicious code in babel-lyra-jest-apex (npm)
- Aug 14, 2025
Malicious code in babel-loqder (npm)
- Aug 14, 2025
Malicious code in babel-loadre (npm)
- Aug 14, 2025
Malicious code in babel-laoder (npm)
- Aug 14, 2025
Malicious code in babel-europa-cybernetics-yonder (npm)
- Aug 14, 2025
Malicious code in babel-antares-local-public (npm)
- Aug 14, 2025
Malicious code in ba-test (npm)
- Aug 14, 2025
Malicious code in b5ffer-xor (npm)
- Aug 14, 2025
Malicious code in b2w-log (npm)
- Aug 14, 2025
Malicious code in b04y1b (npm)
- Aug 14, 2025
Malicious code in azurewebserverlogstosql (npm)
Page 5685 of 6,634