Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in bn.sj (npm)
- Aug 19, 2022
Malicious code in bignumbnev.jr (npm)
- Aug 19, 2022
Malicious code in bi9 (npm)
- Aug 19, 2022
Malicious code in bfrf (npm)
- Aug 19, 2022
Malicious code in bdfen (npm)
- Aug 19, 2022
Malicious code in bconffee-script (npm)
- Aug 19, 2022
Malicious code in baes64-js (npm)
- Aug 19, 2022
Malicious code in baelgenerbtor (npm)
- Aug 19, 2022
Malicious code in bael-plugin-syntax-dynramic-import (npm)
- Aug 19, 2022
Malicious code in babfl-ie2mplate (npm)
- Aug 19, 2022
Malicious code in babel-trasveres (npm)
- Aug 19, 2022
Malicious code in babel-pzugin-transform-es2015-modues-commonjs (npm)
- Aug 19, 2022
Malicious code in babel-pugif-sntax-jsx (npm)
- Aug 19, 2022
Malicious code in babel-preset-reatc (npm)
- Aug 19, 2022
Malicious code in babel-polyflil (npm)
- Aug 19, 2022
Malicious code in babel-plugin-transfvrm-rvntime (npm)
- Aug 19, 2022
Malicious code in babel-plugin-transform3react-remove-prop-t8pes (npm)
- Aug 19, 2022
Malicious code in babel-lugin-dynamic-i9port-node (npm)
- Aug 19, 2022
Malicious code in bab3el-regyster (npm)
- Aug 19, 2022
Malicious code in b4lesised (npm)
- Aug 19, 2022
Malicious code in awodr-wrap (npm)
- Aug 19, 2022
Malware in brsolve-from
1 compromised version
- Aug 19, 2022
Malware in bostcs-perset-env
1 compromised version
- Aug 19, 2022
Malware in babel-trasveres
1 compromised version
- Aug 19, 2022
Malware in babfl-ie2mplate
1 compromised version
- Aug 19, 2022
Malware in bv4
1 compromised version
- Aug 19, 2022
Malware in bytebufevr
1 compromised version
- Aug 19, 2022
Malware in clipobard
1 compromised version
- Aug 19, 2022
Malware in babel-plugin-transfvrm-rvntime
1 compromised version
- Aug 19, 2022
Malware in chokdazr
1 compromised version
- Aug 19, 2022
Malware in babel-preset-reatc
1 compromised version
- Aug 19, 2022
Malware in baes64-js
1 compromised version
- Aug 19, 2022
Malware in ckfors
1 compromised version
- Aug 19, 2022
Malware in babel-pugif-sntax-jsx
1 compromised version
- Aug 19, 2022
Malware in bubird
1 compromised version
- Aug 19, 2022
Malware in cd5
1 compromised version
- Aug 19, 2022
Malware in bconffee-script
1 compromised version
- Aug 19, 2022
Malware in bn.sj
1 compromised version
- Aug 19, 2022
Malware in bignumbnev.jr
1 compromised version
- Aug 19, 2022
Malware in awodr-wrap
1 compromised version
- Aug 19, 2022
Malware in bab3el-regyster
1 compromised version
- Aug 19, 2022
Malware in coninect-flksh
1 compromised version
- Aug 19, 2022
Malware in cam.flcase
1 compromised version
- Aug 19, 2022
Malware in chanbfe
1 compromised version
- Aug 19, 2022
Malware in bael-plugin-syntax-dynramic-import
1 compromised version
- Aug 19, 2022
Malware in chartzj
1 compromised version
- Aug 19, 2022
Malware in babel-polyflil
1 compromised version
- Aug 19, 2022
Malware in content-tep
1 compromised version
- Aug 19, 2022
Malware in boject-path
1 compromised version
- Aug 19, 2022
Malware in crar
1 compromised version
Page 6371 of 6,634