Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in bionics-lightyear-changelog-spica (npm)
- Aug 14, 2025
Malicious code in bionics-lacerta-astrochemistry-stratosphere (npm)
- Aug 14, 2025
Malicious code in bionics-fornax-library-impulse (npm)
- Aug 14, 2025
Malicious code in biomimicry-supercluster-apollo-mutation (npm)
- Aug 14, 2025
Malicious code in biomimicry-rigel-readable-cypress (npm)
- Aug 14, 2025
Malicious code in biomimicry-mesosphere-outercore-capella (npm)
- Aug 14, 2025
Malicious code in biomimicry-dorado-cosmology-figures (npm)
- Aug 14, 2025
Malicious code in biomimicry-cluster-geckodriver-schema (npm)
- Aug 14, 2025
Malicious code in bioinformatics-transport-cz-conventional-changelog-kaus (npm)
- Aug 14, 2025
Malicious code in bioinformatics-foundation-eslint-plugin-galaxy (npm)
- Aug 14, 2025
Malicious code in bioinformatics-fetch-heka-publish (npm)
- Aug 14, 2025
Malicious code in bioinformatics-ceres-jovian-nightmare (npm)
- Aug 14, 2025
Malicious code in bioinformatics-areology-element-ui-mira (npm)
- Aug 14, 2025
Malicious code in biohacking-radiant-websockets-link (npm)
- Aug 14, 2025
Malicious code in biohacking-accretion-astrophysics-deimos (npm)
- Aug 14, 2025
Malicious code in biogeochemistry-sync-sedna-parallax (npm)
- Aug 14, 2025
Malicious code in biogeochemistry-astrobiology-iota-eclipse (npm)
- Aug 14, 2025
Malicious code in bindofn (npm)
- Aug 14, 2025
Malicious code in bind-key (npm)
- Aug 14, 2025
Malicious code in binarypi (npm)
- Aug 14, 2025
Malicious code in binary-install-example (npm)
- Aug 14, 2025
Malicious code in binadit (npm)
- Aug 14, 2025
Malicious code in bim-authorization (npm)
- Aug 14, 2025
Malicious code in billets (npm)
- Aug 14, 2025
Malicious code in billalo (npm)
- Aug 14, 2025
Malicious code in billagmtserv (npm)
- Aug 14, 2025
Malicious code in bill-calculator (npm)
- Aug 14, 2025
Malicious code in bilginiz (npm)
- Aug 14, 2025
Malicious code in bilard (npm)
- Aug 14, 2025
Malicious code in bilagscan (npm)
- Aug 14, 2025
Malicious code in bigxmac (npm)
- Aug 14, 2025
Malicious code in bigwise (npm)
- Aug 14, 2025
Malicious code in bigwebappwebapp (npm)
- Aug 14, 2025
Malicious code in bigwebappweb (npm)
- Aug 14, 2025
Malicious code in bigwebapp (npm)
- Aug 14, 2025
Malicious code in bigpicture-js (npm)
- Aug 14, 2025
Malicious code in bigpicture-client (npm)
- Aug 14, 2025
Malicious code in bigdish (npm)
- Aug 14, 2025
Malicious code in bigbank-ui-lab (npm)
- Aug 14, 2025
Malicious code in big-lambda-report-transpile-beta (npm)
- Aug 14, 2025
Malicious code in bidi-utils (npm)
- Aug 14, 2025
Malicious code in bicycle-moat-nqma (npm)
- Aug 14, 2025
Malicious code in bicycle-jungle-ajk4 (npm)
- Aug 14, 2025
Malicious code in bicycle-echo-g9bp (npm)
- Aug 14, 2025
Malicious code in bictore-lib (npm)
- Aug 14, 2025
Malicious code in bictoinjs-lib (npm)
- Aug 14, 2025
Malicious code in bictoind-rpc (npm)
- Aug 14, 2025
Malicious code in bictoin-ops (npm)
- Aug 14, 2025
Malicious code in biclique (npm)
- Aug 14, 2025
Malicious code in bichart (npm)
Page 6107 of 7,293