Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in bptqya (npm)
- Aug 14, 2025
Malicious code in bpmn-exec (npm)
- Aug 14, 2025
Malicious code in bpluser (npm)
- Aug 14, 2025
Malicious code in bplascom (npm)
- Aug 14, 2025
Malicious code in bpi66 (npm)
- Aug 14, 2025
Malicious code in bpi39 (npm)
- Aug 14, 2025
Malicious code in bpexample (npm)
- Aug 14, 2025
Malicious code in bpager (npm)
- Aug 14, 2025
Malicious code in bp66 (npm)
- Aug 14, 2025
Malicious code in boykekp (npm)
- Aug 14, 2025
Malicious code in boyblack (npm)
- Aug 14, 2025
Malicious code in boyanglog (npm)
- Aug 14, 2025
Malicious code in boxpress (npm)
- Aug 14, 2025
Malicious code in boxless (npm)
- Aug 14, 2025
Malicious code in boxerjs (npm)
- Aug 14, 2025
Malicious code in boxedin (npm)
- Aug 14, 2025
Malicious code in boxclient (npm)
- Aug 14, 2025
Malicious code in boxcars (npm)
- Aug 14, 2025
Malicious code in bowtie (npm)
- Aug 14, 2025
Malicious code in bowersups (npm)
- Aug 14, 2025
Malicious code in bowee (npm)
- Aug 14, 2025
Malicious code in bowe (npm)
- Aug 14, 2025
Malicious code in bouwapp (npm)
- Aug 14, 2025
Malicious code in boulogne (npm)
- Aug 14, 2025
Malicious code in boulder_qn5rr_a79gb_kismet (npm)
- Aug 14, 2025
Malicious code in boulder_pyfy4_iwe21_reef (npm)
- Aug 14, 2025
Malicious code in boulder_7lb0n_2tscj_atlas (npm)
- Aug 14, 2025
Malicious code in boulder_5ud51_wt1ix_blossom (npm)
- Aug 14, 2025
Malicious code in boulder_0x8tc_bg7u8_yonder (npm)
- Aug 14, 2025
Malicious code in boulder-zenith-skb049-project (npm)
- Aug 14, 2025
Malicious code in boulder-whale-ghj991-project (npm)
- Aug 14, 2025
Malicious code in boulder-tide-bpi689-project (npm)
- Aug 14, 2025
Malicious code in boulder-tb2z4-vn8c6-bison-project (npm)
- Aug 14, 2025
Malicious code in boulder-star-ldg158-project (npm)
- Aug 14, 2025
Malicious code in boulder-rreq7-kekff-tempest-project (npm)
- Aug 14, 2025
Malicious code in boulder-r4sqf-x3f75-nymph-project (npm)
- Aug 14, 2025
Malicious code in boulder-opal-klq784-project (npm)
- Aug 14, 2025
Malicious code in boulder-moon-few013-project (npm)
- Aug 14, 2025
Malicious code in boulder-kale-dtl270-project (npm)
- Aug 14, 2025
Malicious code in boulder-island-hkv808-project (npm)
- Aug 14, 2025
Malicious code in boulder-igloo-bzd590-project (npm)
- Aug 14, 2025
Malicious code in boulder-glade-kxk543-project (npm)
- Aug 14, 2025
Malicious code in boulder-falcon-nep288-project (npm)
- Aug 14, 2025
Malicious code in boulder-ecfpi-kkm0i-ember-project (npm)
- Aug 14, 2025
Malicious code in boulder-e16ky-ahxzy-opal-project (npm)
- Aug 14, 2025
Malicious code in boulder-caravan-wix752-project (npm)
- Aug 14, 2025
Malicious code in boulder-butterfly-uff542-project (npm)
- Aug 14, 2025
Malicious code in botprotect-v13 (npm)
- Aug 14, 2025
Malicious code in botomatik (npm)
- Aug 14, 2025
Malicious code in botkit-storage-mongo-updated (npm)
Page 6100 of 7,293