Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in botinator (npm)
- Aug 14, 2025
Malicious code in botframework-webchat-styles (npm)
1 compromised version
- Aug 14, 2025
Malicious code in botframework-webchat-react-valibot (npm)
1 compromised version
- Aug 14, 2025
Malicious code in botframework-webchat-base (npm)
1 compromised version
- Aug 14, 2025
Malicious code in botbuilder-js (npm)
- Aug 14, 2025
Malicious code in bot-methods (npm)
- Aug 14, 2025
Malicious code in bot-fb (npm)
- Aug 14, 2025
Malicious code in bot-creator (npm)
- Aug 14, 2025
Malicious code in boson-scorpius-barnard-galaxy (npm)
- Aug 14, 2025
Malicious code in boson-fermion-eslint-config-grunt (npm)
- Aug 14, 2025
Malicious code in boson-epimetheus-pulsar-vulcan (npm)
- Aug 14, 2025
Malicious code in boson-csrf-accretion-stream (npm)
- Aug 14, 2025
Malicious code in bosnobot (npm)
- Aug 14, 2025
Malicious code in bos-fontmin (npm)
- Aug 14, 2025
Malicious code in borneo (npm)
- Aug 14, 2025
Malicious code in borealis-supercluster-chariklo-browserify (npm)
- Aug 14, 2025
Malicious code in borealis-stratosphere-prosthetics-ariel (npm)
- Aug 14, 2025
Malicious code in bootstrap4 (npm)
- Aug 14, 2025
Malicious code in bootstrap.docpad (npm)
- Aug 14, 2025
Malicious code in bootstrap-material-design-datepicker (npm)
- Aug 14, 2025
Malicious code in bootstrap-jabbah-blackhole-dotenv-safe (npm)
- Aug 14, 2025
Malicious code in bootstrap-brane-xo-rest (npm)
- Aug 14, 2025
Malicious code in bootstrap-areology-virtualreality-postcss (npm)
- Aug 14, 2025
Malicious code in bootstrap-arcturus-jupiter-electron-builder (npm)
- Aug 14, 2025
Malicious code in bootstrap-abiogenesis-pegasus-quasar (npm)
- Aug 14, 2025
Malicious code in bootsnap (npm)
- Aug 14, 2025
Malicious code in bootscut (npm)
- Aug 14, 2025
Malicious code in bootpulse (npm)
- Aug 14, 2025
Malicious code in bootmap (npm)
- Aug 14, 2025
Malicious code in bootler-app (npm)
- Aug 14, 2025
Malicious code in bootes-zephyr-polaris-markdownlint (npm)
- Aug 14, 2025
Malicious code in bootes-xenobiology-leda-halley (npm)
- Aug 14, 2025
Malicious code in bootes-uninstall-hawkingradiation-loglevel (npm)
- Aug 14, 2025
Malicious code in bootes-primatology-commitlint-reveal-md (npm)
- Aug 14, 2025
Malicious code in bootes-mutation-eleventy-zephyr (npm)
- Aug 14, 2025
Malicious code in bootes-less-brane-betelgeuse (npm)
- Aug 14, 2025
Malicious code in bootes-innercore-ichnology-npm (npm)
- Aug 14, 2025
Malicious code in bootes-frontend-proxima-genomics (npm)
- Aug 14, 2025
Malicious code in bootes-fetch-eclipse-aether (npm)
- Aug 14, 2025
Malicious code in bootes-chromedriver-dynamo-protractor (npm)
- Aug 14, 2025
Malicious code in bootclass (npm)
- Aug 14, 2025
Malicious code in bootboot (npm)
- Aug 14, 2025
Malicious code in bootband (npm)
- Aug 14, 2025
Malicious code in boopathi (npm)
- Aug 14, 2025
Malicious code in boomtak (npm)
- Aug 14, 2025
Malicious code in boolean-theta-static-sudo-node (npm)
- Aug 14, 2025
Malicious code in booksuite (npm)
- Aug 14, 2025
Malicious code in bookopen (npm)
- Aug 14, 2025
Malicious code in booknow (npm)
- Aug 14, 2025
Malicious code in bookingc (npm)
Page 6101 of 7,293