Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in bnog-core (npm)
- Aug 14, 2025
Malicious code in bnext (npm)
- Aug 14, 2025
Malicious code in bndes-ux (npm)
- Aug 14, 2025
Malicious code in bmphide (npm)
- Aug 14, 2025
Malicious code in bmnick (npm)
- Aug 14, 2025
Malicious code in bmatrix (npm)
- Aug 14, 2025
Malicious code in bmagicseo (npm)
- Aug 14, 2025
Malicious code in blynux (npm)
- Aug 14, 2025
Malicious code in blutbad (npm)
- Aug 14, 2025
Malicious code in blurmate (npm)
- Aug 14, 2025
Malicious code in blurbit (npm)
- Aug 14, 2025
Malicious code in blukanoff (npm)
- Aug 14, 2025
Malicious code in bluezone (npm)
- Aug 14, 2025
Malicious code in bluespp (npm)
- Aug 14, 2025
Malicious code in blueshift-winston-run-script-jest (npm)
- Aug 14, 2025
Malicious code in blueshift-hapi-blaze-atlas (npm)
- Aug 14, 2025
Malicious code in bluescale (npm)
- Aug 14, 2025
Malicious code in bluesat (npm)
- Aug 14, 2025
Malicious code in bluepages (npm)
- Aug 14, 2025
Malicious code in BlueOps (npm)
- Aug 14, 2025
Malicious code in BlueOcean (npm)
- Aug 14, 2025
Malicious code in bluemount (npm)
- Aug 14, 2025
Malicious code in bluemix-objstore (npm)
- Aug 14, 2025
Malicious code in bluemate (npm)
- Aug 14, 2025
Malicious code in bluelake (npm)
- Aug 14, 2025
Malicious code in blueibrd (npm)
- Aug 14, 2025
Malicious code in bluehue (npm)
- Aug 14, 2025
Malicious code in blueeyes (npm)
- Aug 14, 2025
Malicious code in bluebutton-hapi (npm)
- Aug 14, 2025
Malicious code in bluebone (npm)
- Aug 14, 2025
Malicious code in bluebird_nwrck_bsmz7_keystone (npm)
- Aug 14, 2025
Malicious code in bluebird_frgh4_inkzu_grove (npm)
- Aug 14, 2025
Malicious code in bluebird_2qjxm_q5erk_solace (npm)
- Aug 14, 2025
Malicious code in bluebin (npm)
- Aug 14, 2025
Malicious code in bluebidr (npm)
- Aug 14, 2025
Malicious code in blubird (npm)
- Aug 14, 2025
Malicious code in bls-slack-service (npm)
- Aug 14, 2025
Malicious code in blossom_n17hq_gzml8_keystone (npm)
- Aug 14, 2025
Malicious code in blossom-yoxj7-jnwfi-frost-project (npm)
- Aug 14, 2025
Malicious code in blossom-xylophone-nlq687-project (npm)
- Aug 14, 2025
Malicious code in blossom-xenon-dcp764-project (npm)
- Aug 14, 2025
Malicious code in blossom-willow-sws030-project (npm)
- Aug 14, 2025
Malicious code in blossom-waterfall-qji119-project (npm)
- Aug 14, 2025
Malicious code in blossom-violet-gjk786-project (npm)
- Aug 14, 2025
Malicious code in blossom-tornado-ljs889-project (npm)
- Aug 14, 2025
Malicious code in blossom-spruce-mwv729-project (npm)
- Aug 14, 2025
Malicious code in blossom-nimbus-shv514-project (npm)
- Aug 14, 2025
Malicious code in blossom-meadow-hbj946-project (npm)
- Aug 14, 2025
Malicious code in blossom-lava-nyf843-project (npm)
- Aug 14, 2025
Malicious code in blossom-lagoon-zqs580-project (npm)
Page 6103 of 7,293