Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in biaozhika (npm)
- Aug 14, 2025
Malicious code in biagio (npm)
- Aug 14, 2025
Malicious code in bhoupaxkqdkrwems (npm)
- Aug 14, 2025
Malicious code in bhokal (npm)
- Aug 14, 2025
Malicious code in bhmusic (npm)
- Aug 14, 2025
Malicious code in bhjyt5 (npm)
- Aug 14, 2025
Malicious code in bh-elements (npm)
- Aug 14, 2025
Malicious code in bgrt4s (npm)
- Aug 14, 2025
Malicious code in bgnukes (npm)
- Aug 14, 2025
Malicious code in bggtest (npm)
- Aug 14, 2025
Malicious code in bgdrupal (npm)
- Aug 14, 2025
Malicious code in bg665 (npm)
- Aug 14, 2025
Malicious code in bg524 (npm)
- Aug 14, 2025
Malicious code in bg-react-redux (npm)
- Aug 14, 2025
Malicious code in bfyr3 (npm)
- Aug 14, 2025
Malicious code in bfy32 (npm)
- Aug 14, 2025
Malicious code in bftry4 (npm)
- Aug 14, 2025
Malicious code in bfrd344 (npm)
- Aug 14, 2025
Malicious code in bfr44 (npm)
- Aug 14, 2025
Malicious code in bflist (npm)
- Aug 14, 2025
Malicious code in bfingers (npm)
- Aug 14, 2025
Malicious code in bfgt4423 (npm)
- Aug 14, 2025
Malicious code in bfgr34 (npm)
- Aug 14, 2025
Malicious code in bfgr3 (npm)
- Aug 14, 2025
Malicious code in bfgfvh (npm)
- Aug 14, 2025
Malicious code in bfg44 (npm)
- Aug 14, 2025
Malicious code in bfer4 (npm)
- Aug 14, 2025
Malicious code in bfdgf4 (npm)
- Aug 14, 2025
Malicious code in bfcrowd (npm)
- Aug 14, 2025
Malicious code in bf44 (npm)
- Aug 14, 2025
Malicious code in bf-crc (npm)
- Aug 14, 2025
Malicious code in beyblade (npm)
- Aug 14, 2025
Malicious code in bexlanphp (npm)
- Aug 14, 2025
Malicious code in bexio-teststyleguide (npm)
- Aug 14, 2025
Malicious code in betterga (npm)
- Aug 14, 2025
Malicious code in betsense-frontend (npm)
- Aug 14, 2025
Malicious code in betlab-common-auth (npm)
- Aug 14, 2025
Malicious code in betlab-common (npm)
- Aug 14, 2025
Malicious code in betelgeuse-sirius-helios-elara (npm)
- Aug 14, 2025
Malicious code in betelgeuse-phenomic-warp-kuiperbelt (npm)
- Aug 14, 2025
Malicious code in betelgeuse-paleomagnetism-airbnb-dione (npm)
- Aug 14, 2025
Malicious code in betelgeuse-juno-mantle-init (npm)
- Aug 14, 2025
Malicious code in betelgeuse-interferometry-meteor-wasat (npm)
- Aug 14, 2025
Malicious code in betbaws (npm)
- Aug 14, 2025
Malicious code in betazinha (npm)
- Aug 14, 2025
Malicious code in betaglide (npm)
- Aug 14, 2025
Malicious code in betabulls (npm)
- Aug 14, 2025
Malicious code in beta-epsilon-unix-emulate-spy (npm)
- Aug 14, 2025
Malicious code in beta-decompress-daemon-minify-simple (npm)
- Aug 14, 2025
Malicious code in bestfps (npm)
Page 6108 of 7,293