Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in bookatrip (npm)
- Aug 14, 2025
Malicious code in book-user-process-protected-execute (npm)
- Aug 14, 2025
Malicious code in book-short-grid-benchmark-route (npm)
- Aug 14, 2025
Malicious code in book-alpha-byte-xi-omicron (npm)
- Aug 14, 2025
Malicious code in boogeyman (npm)
- Aug 14, 2025
Malicious code in bonvalsyn (npm)
- Aug 14, 2025
Malicious code in bonteng (npm)
- Aug 14, 2025
Malicious code in bonsaits (npm)
- Aug 14, 2025
Malicious code in bonsailib (npm)
- Aug 14, 2025
Malicious code in bongos (npm)
- Aug 14, 2025
Malicious code in bonfire-umbrella-tsh129-project (npm)
- Aug 14, 2025
Malicious code in bonfire-pinnacle-byu239-project (npm)
- Aug 14, 2025
Malicious code in bonfire-hill-fjz601-project (npm)
- Aug 14, 2025
Malicious code in bonfire-gorge-ncg364-project (npm)
- Aug 14, 2025
Malicious code in bonfire-glacier-poe104-project (npm)
- Aug 14, 2025
Malicious code in bonfire-everest-ede478-project (npm)
- Aug 14, 2025
Malicious code in bonfire-dragon-xjp200-project (npm)
- Aug 14, 2025
Malicious code in bonfire-arctic-jzf710-project (npm)
- Aug 14, 2025
Malicious code in bonfire-albatross-laa872-project (npm)
- Aug 14, 2025
Malicious code in bonez (npm)
- Aug 14, 2025
Malicious code in bonavolvo (npm)
- Aug 14, 2025
Malicious code in bonanzaslot (npm)
- Aug 14, 2025
Malicious code in bolsos (npm)
- Aug 14, 2025
Malicious code in bollman (npm)
- Aug 14, 2025
Malicious code in bolcsi (npm)
- Aug 14, 2025
Malicious code in bokehhh (npm)
- Aug 14, 2025
Malicious code in Boilerpipe-Scraper (npm)
- Aug 14, 2025
Malicious code in boiidash (npm)
- Aug 14, 2025
Malicious code in boidssim (npm)
- Aug 14, 2025
Malicious code in bohemiaa (npm)
- Aug 14, 2025
Malicious code in bogbuk (npm)
- Aug 14, 2025
Malicious code in boehmtest (npm)
- Aug 14, 2025
Malicious code in bodyfuel (npm)
- Aug 14, 2025
Malicious code in body-parse-xml (npm)
- Aug 14, 2025
Malicious code in boc1dk (npm)
- Aug 14, 2025
Malicious code in boby_parser (npm)
3 compromised versions
- Aug 14, 2025
Malicious code in bobjollmodal (npm)
- Aug 14, 2025
Malicious code in bobhall (npm)
- Aug 14, 2025
Malicious code in bobbyjoe (npm)
- Aug 14, 2025
Malicious code in boatyard (npm)
- Aug 14, 2025
Malicious code in boatrmi (npm)
- Aug 14, 2025
Malicious code in boardtime (npm)
- Aug 14, 2025
Malicious code in bnrn-test (npm)
- Aug 14, 2025
Malicious code in bnrn-kits (npm)
- Aug 14, 2025
Malicious code in bnrn-gloabal-cli (npm)
- Aug 14, 2025
Malicious code in bnrn-extra (npm)
- Aug 14, 2025
Malicious code in bnrn-cli-test (npm)
- Aug 14, 2025
Malicious code in bnrn-cli-snapshot (npm)
- Aug 14, 2025
Malicious code in bnrn-cli (npm)
- Aug 14, 2025
Malicious code in bnrn (npm)
Page 6102 of 7,293