Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in blaze-dotenv-parse-variables-spawn-foundation (npm)
- Aug 14, 2025
Malicious code in blazar-vuepress-exoplanet-meissa (npm)
- Aug 14, 2025
Malicious code in blazar-transport-webdriver-manager-dependencies (npm)
- Aug 14, 2025
Malicious code in blazar-non-blocking-dotenv-parse-variables-test (npm)
- Aug 14, 2025
Malicious code in blazar-comet-toml-resolvers (npm)
- Aug 14, 2025
Malicious code in blauen (npm)
- Aug 14, 2025
Malicious code in blank-ts-monorepo-common (npm)
- Aug 14, 2025
Malicious code in blank-slate (npm)
- Aug 14, 2025
Malicious code in blanchea (npm)
- Aug 14, 2025
Malicious code in blalab (npm)
- Aug 14, 2025
Malicious code in blagsite (npm)
- Aug 14, 2025
Malicious code in blagcast (npm)
- Aug 14, 2025
Malicious code in blackpanda (npm)
- Aug 14, 2025
Malicious code in blackme (npm)
- Aug 14, 2025
Malicious code in blacklisted_credentials_client (npm)
- Aug 14, 2025
Malicious code in blackhole-unuk-brane-semantic-release (npm)
- Aug 14, 2025
Malicious code in blackhole-underpass-8jop (npm)
- Aug 14, 2025
Malicious code in blackhole-quarry-oqot (npm)
- Aug 14, 2025
Malicious code in blackhole-parsnip-fsho (npm)
- Aug 14, 2025
Malicious code in blackhole-module-rimraf-xenon (npm)
- Aug 14, 2025
Malicious code in blackhole-moat-6ioc (npm)
- Aug 14, 2025
Malicious code in blackhole-mensa-chromedriver-hermes (npm)
- Aug 14, 2025
Malicious code in blackhole-maple-n0tm (npm)
- Aug 14, 2025
Malicious code in blackhole-kayak-zutj (npm)
- Aug 14, 2025
Malicious code in blackhole-hyperion-jwt-command (npm)
- Aug 14, 2025
Malicious code in blackhole-cygnus-phenomic-miranda (npm)
- Aug 14, 2025
Malicious code in blackhole-castle-bj95 (npm)
- Aug 14, 2025
Malicious code in blackhole-beetroot-ve6x (npm)
- Aug 14, 2025
Malicious code in blabberui (npm)
- Aug 14, 2025
Malicious code in blaast-web (npm)
- Aug 14, 2025
Malicious code in blaast-invoker (npm)
- Aug 14, 2025
Malicious code in blaast-deploy (npm)
- Aug 14, 2025
Malicious code in bkdate (npm)
- Aug 14, 2025
Malicious code in bkdajucmnvhkyizw (npm)
- Aug 14, 2025
Malicious code in bk11 (npm)
- Aug 14, 2025
Malicious code in bjuqewotfnsrgdmh (npm)
- Aug 14, 2025
Malicious code in bjtcore (npm)
- Aug 14, 2025
Malicious code in bjt4 (npm)
- Aug 14, 2025
Malicious code in bjhegland (npm)
- Aug 14, 2025
Malicious code in bjecore (npm)
- Aug 14, 2025
Malicious code in bjarkehs (npm)
- Aug 14, 2025
Malicious code in biznes (npm)
- Aug 14, 2025
Malicious code in bizhelper (npm)
- Aug 14, 2025
Malicious code in bizdiary (npm)
- Aug 14, 2025
Malicious code in bitwala-api-routes (npm)
- Aug 14, 2025
Malicious code in bitrex (npm)
- Aug 14, 2025
Malicious code in bitnami-helpers (npm)
- Aug 14, 2025
Malicious code in bitlocker (npm)
- Aug 14, 2025
Malicious code in bitext (npm)
- Aug 14, 2025
Malicious code in bitcsec (npm)
Page 6105 of 7,293