Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in breeze_d7ihl_218tx_xylophone (npm)
- Aug 14, 2025
Malicious code in breeze-t1sd0-rn726-xenith-project (npm)
- Aug 14, 2025
Malicious code in breeze-pv7d6-pg6ac-vortex-project (npm)
- Aug 14, 2025
Malicious code in breeze-plxs4-2wszg-xenith-project (npm)
- Aug 14, 2025
Malicious code in breeze-7emaq-0hcnt-xenith-project (npm)
- Aug 14, 2025
Malicious code in breblang (npm)
- Aug 14, 2025
Malicious code in breadbyus (npm)
- Aug 14, 2025
Malicious code in bre44 (npm)
- Aug 14, 2025
Malicious code in brc3 (npm)
- Aug 14, 2025
Malicious code in brazzers (npm)
- Aug 14, 2025
Malicious code in brazza (npm)
- Aug 14, 2025
Malicious code in brawegvimjnqfhpx (npm)
- Aug 14, 2025
Malicious code in bravo-zucchini-qaug (npm)
- Aug 14, 2025
Malicious code in bravo-z1a-project (npm)
- Aug 14, 2025
Malicious code in bravo-xray-sgjp (npm)
- Aug 14, 2025
Malicious code in bravo-xigua-nectarine-bvmrd (npm)
- Aug 14, 2025
Malicious code in bravo-whiskey-swuz (npm)
- Aug 14, 2025
Malicious code in bravo-victor-tkmh (npm)
- Aug 14, 2025
Malicious code in bravo-victor-ojgr (npm)
- Aug 14, 2025
Malicious code in bravo-vanilla-uaak (npm)
- Aug 14, 2025
Malicious code in bravo-vanilla-india-rixih (npm)
- Aug 14, 2025
Malicious code in bravo-uof-project (npm)
- Aug 14, 2025
Malicious code in bravo-uniform-lztc (npm)
- Aug 14, 2025
Malicious code in bravo-uniform-grape-fepjp (npm)
- Aug 14, 2025
Malicious code in bravo-umg-project (npm)
- Aug 14, 2025
Malicious code in bravo-umbrella-jyj6 (npm)
- Aug 14, 2025
Malicious code in bravo-u5q-project (npm)
- Aug 14, 2025
Malicious code in bravo-tangerine-victor-hfgll (npm)
- Aug 14, 2025
Malicious code in bravo-tangerine-fwxx (npm)
- Aug 14, 2025
Malicious code in bravo-strawberry-raspberry-gygxp (npm)
- Aug 14, 2025
Malicious code in bravo-strawberry-lshf (npm)
- Aug 14, 2025
Malicious code in bravo-sierra-aqsc (npm)
- Aug 14, 2025
Malicious code in bravo-romeo-levn (npm)
- Aug 14, 2025
Malicious code in bravo-romeo-honeydew-bnswn (npm)
- Aug 14, 2025
Malicious code in bravo-rg5-project (npm)
- Aug 14, 2025
Malicious code in bravo-rbl-project (npm)
- Aug 14, 2025
Malicious code in bravo-raspberry-iidm (npm)
- Aug 14, 2025
Malicious code in bravo-quokka-lb7o (npm)
- Aug 14, 2025
Malicious code in bravo-pmw-project (npm)
- Aug 14, 2025
Malicious code in bravo-papaya-romeo-rkkib (npm)
- Aug 14, 2025
Malicious code in bravo-papaya-qdcu (npm)
- Aug 14, 2025
Malicious code in bravo-papa-ugli-khtch (npm)
- Aug 14, 2025
Malicious code in bravo-orange-xiji (npm)
- Aug 14, 2025
Malicious code in bravo-orange-rugh (npm)
- Aug 14, 2025
Malicious code in bravo-orange-lvmt (npm)
- Aug 14, 2025
Malicious code in bravo-nii-project (npm)
- Aug 14, 2025
Malicious code in bravo-n3f-project (npm)
- Aug 14, 2025
Malicious code in bravo-kiwi-rcww (npm)
- Aug 14, 2025
Malicious code in bravo-kilo-voon (npm)
- Aug 14, 2025
Malicious code in bravo-kilo-tdaz (npm)
Page 6098 of 7,293