Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in bitcroe-lib (npm)
- Aug 14, 2025
Malicious code in bitconijs-lib (npm)
- Aug 14, 2025
Malicious code in bitconid-rpc (npm)
- Aug 14, 2025
Malicious code in bitconi-ops (npm)
- Aug 14, 2025
Malicious code in bitcoisnj-lib (npm)
- Aug 14, 2025
Malicious code in bitcoinnn (npm)
- Aug 14, 2025
Malicious code in bitcoin-url (npm)
- Aug 14, 2025
Malicious code in bitcoin-sweep (npm)
- Aug 14, 2025
Malicious code in bitcoin-osp (npm)
- Aug 14, 2025
Malicious code in bitcoimjs-lib (npm)
- Aug 14, 2025
Malicious code in bitcoimd-rpc (npm)
- Aug 14, 2025
Malicious code in bitcoijns-lib (npm)
- Aug 14, 2025
Malicious code in bitcionjslib (npm)
- Aug 14, 2025
Malicious code in bitcionjs (npm)
- Aug 14, 2025
Malicious code in bitcion-ops (npm)
- Aug 14, 2025
Malicious code in bitches (npm)
- Aug 14, 2025
Malicious code in bitcards (npm)
- Aug 14, 2025
Malicious code in bitbox02_backup (npm)
- Aug 14, 2025
Malicious code in bitbone (npm)
- Aug 14, 2025
Malicious code in bitbath (npm)
- Aug 14, 2025
Malicious code in bison-xc86j-3wja7-quartz-project (npm)
- Aug 14, 2025
Malicious code in bison-7dncg-jct90-crescent-project (npm)
- Aug 14, 2025
Malicious code in bison-7dawf-siudn-yarn-project (npm)
- Aug 14, 2025
Malicious code in bison-5wkld-cr4yx-ember-project (npm)
- Aug 14, 2025
Malicious code in bisocie (npm)
- Aug 14, 2025
Malicious code in bisket (npm)
- Aug 14, 2025
Malicious code in bisbino (npm)
- Aug 14, 2025
Malicious code in biriba (npm)
- Aug 14, 2025
Malicious code in birdtree (npm)
- Aug 14, 2025
Malicious code in birdperson (npm)
- Aug 14, 2025
Malicious code in bird-uuap (npm)
- Aug 14, 2025
Malicious code in birch-wj0fs-sfsp2-juniper-project (npm)
- Aug 14, 2025
Malicious code in birch-uwob1-e1x97-jungle-project (npm)
- Aug 14, 2025
Malicious code in birch-tpexd-6b3ff-zen-project (npm)
- Aug 14, 2025
Malicious code in birch-d7hn0-cnz4d-crescent-project (npm)
- Aug 14, 2025
Malicious code in birch-c0vrp-j3rv5-quicksilver-project (npm)
- Aug 14, 2025
Malicious code in birch-a5vvj-zhve1-ash-project (npm)
- Aug 14, 2025
Malicious code in bip30 (npm)
- Aug 14, 2025
Malicious code in biotechnology-superagent-primatology-juno (npm)
- Aug 14, 2025
Malicious code in biotechnology-rimraf-yakutsk-greatfilter (npm)
- Aug 14, 2025
Malicious code in biotechnology-parsec-cosmiconfig-run-script (npm)
- Aug 14, 2025
Malicious code in biotechnology-helmet-robotics-gacrux (npm)
- Aug 14, 2025
Malicious code in biotechnology-cache-axios-triton (npm)
- Aug 14, 2025
Malicious code in biosignature-rocket-carpo-blueshift (npm)
- Aug 14, 2025
Malicious code in biosignature-eclipse-puppeteer-hydra (npm)
- Aug 14, 2025
Malicious code in biosignature-cryovolcano-geochronology-kinetic (npm)
- Aug 14, 2025
Malicious code in biosignature-carina-fomalhaut-axios (npm)
- Aug 14, 2025
Malicious code in biosignature-bionics-bionics-hermes (npm)
- Aug 14, 2025
Malicious code in bioshock (npm)
- Aug 14, 2025
Malicious code in bionics-photon-google-biomimicry (npm)
Page 6106 of 7,293