Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in brr3 (npm)
- Aug 14, 2025
Malicious code in browzam (npm)
- Aug 14, 2025
Malicious code in browsersync (npm)
- Aug 14, 2025
Malicious code in browserify-writable-antares-tectonophysics (npm)
- Aug 14, 2025
Malicious code in browserify-robotics-loglevel-stratigraphy (npm)
- Aug 14, 2025
Malicious code in browserify-length (npm)
- Aug 14, 2025
Malicious code in browserify-cordelia-chariklo-cli (npm)
- Aug 14, 2025
Malicious code in browserift (npm)
- Aug 14, 2025
Malicious code in browserctl (npm)
- Aug 14, 2025
Malicious code in browser-wrapper (npm)
- Aug 14, 2025
Malicious code in browser-sync-task-runner (npm)
- Aug 14, 2025
Malicious code in browser-readline (npm)
- Aug 14, 2025
Malicious code in browser-html-to-rtf (npm)
- Aug 14, 2025
Malicious code in brook-whirlpool-nir965-project (npm)
- Aug 14, 2025
Malicious code in brook-rainbow-ezj133-project (npm)
- Aug 14, 2025
Malicious code in brook-peony-luh099-project (npm)
- Aug 14, 2025
Malicious code in brook-lightning-cto460-project (npm)
- Aug 14, 2025
Malicious code in brook-leopard-awu297-project (npm)
- Aug 14, 2025
Malicious code in brook-iceberg-njv486-project (npm)
- Aug 14, 2025
Malicious code in brook-hammock-yfw552-project (npm)
- Aug 14, 2025
Malicious code in brook-glade-zuv167-project (npm)
- Aug 14, 2025
Malicious code in brook-galaxy-jxr850-project (npm)
- Aug 14, 2025
Malicious code in brook-dragon-ddp376-project (npm)
- Aug 14, 2025
Malicious code in brook-aspen-jdw189-project (npm)
- Aug 14, 2025
Malicious code in broodrom (npm)
- Aug 14, 2025
Malicious code in broker-web (npm)
- Aug 14, 2025
Malicious code in brogan-paypal (npm)
- Aug 14, 2025
Malicious code in brodie (npm)
- Aug 14, 2025
Malicious code in brobeur (npm)
- Aug 14, 2025
Malicious code in britains (npm)
- Aug 14, 2025
Malicious code in brisk-kismet-wiw904-project (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-user (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-project (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-playerdata (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-permissions (npm)
- Aug 14, 2025
Malicious code in brinkbit-schema-group (npm)
- Aug 14, 2025
Malicious code in brille (npm)
- Aug 14, 2025
Malicious code in brighttalk-uploader (npm)
- Aug 14, 2025
Malicious code in bridgeds (npm)
- Aug 14, 2025
Malicious code in bridgeapp (npm)
- Aug 14, 2025
Malicious code in bridge-xigua-zzn5 (npm)
- Aug 14, 2025
Malicious code in bridge-juniper-vy43 (npm)
- Aug 14, 2025
Malicious code in bridge-jalapeno-cws5 (npm)
- Aug 14, 2025
Malicious code in bridge-date-tc6d (npm)
- Aug 14, 2025
Malicious code in brick-node (npm)
- Aug 14, 2025
Malicious code in brick-browserify-plugin (npm)
- Aug 14, 2025
Malicious code in brick-browser (npm)
- Aug 14, 2025
Malicious code in bric-gis (npm)
- Aug 14, 2025
Malicious code in brewdb (npm)
- Aug 14, 2025
Malicious code in bretieved (npm)
Page 6097 of 7,293