Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in beckys (npm)
- Aug 14, 2025
Malicious code in bechdel (npm)
- Aug 14, 2025
Malicious code in beaver-logger-paypal (npm)
- Aug 14, 2025
Malicious code in beamlee (npm)
- Aug 14, 2025
Malicious code in beam-widgets (npm)
- Aug 14, 2025
Malicious code in beam-frontend (npm)
- Aug 14, 2025
Malicious code in beag.ly (npm)
- Aug 14, 2025
Malicious code in beaconlib (npm)
- Aug 14, 2025
Malicious code in be-kanban-eventbase-importer (npm)
- Aug 14, 2025
Malicious code in bdxetqjsgphvionz (npm)
- Aug 14, 2025
Malicious code in bdfg44 (npm)
- Aug 14, 2025
Malicious code in bdfg43 (npm)
- Aug 14, 2025
Malicious code in bdce3 (npm)
- Aug 14, 2025
Malicious code in bd-header-component (npm)
- Aug 14, 2025
Malicious code in bcpicker (npm)
- Aug 14, 2025
Malicious code in bconi (npm)
- Aug 14, 2025
Malicious code in bcmjgvpqrtdaohek (npm)
- Aug 14, 2025
Malicious code in bcion (npm)
- Aug 14, 2025
Malicious code in bcfinal (npm)
- Aug 14, 2025
Malicious code in bby-page-objects (npm)
- Aug 14, 2025
Malicious code in bbr3 (npm)
- Aug 14, 2025
Malicious code in bbos (npm)
- Aug 14, 2025
Malicious code in bbitsdemo (npm)
- Aug 14, 2025
Malicious code in bbf4 (npm)
- Aug 14, 2025
Malicious code in bber (npm)
- Aug 14, 2025
Malicious code in bbbre (npm)
- Aug 14, 2025
Malicious code in bbbr3 (npm)
- Aug 14, 2025
Malicious code in bbbgit (npm)
- Aug 14, 2025
Malicious code in bb4sa (npm)
- Aug 14, 2025
Malicious code in bb-docs-dgeni (npm)
- Aug 14, 2025
Malicious code in bb-builder (npm)
- Aug 14, 2025
Malicious code in bb-babelfish-format (npm)
- Aug 14, 2025
Malicious code in bayu-tempe86-breki (npm)
- Aug 14, 2025
Malicious code in bayu-tempe42-kuki (npm)
- Aug 14, 2025
Malicious code in bayu-oblok19-sukiwir (npm)
- Aug 14, 2025
Malicious code in bayu-lumpur41-breki (npm)
- Aug 14, 2025
Malicious code in bayu-keraktelor40-sukiwir (npm)
- Aug 14, 2025
Malicious code in bayu-gaplek28-sukiwir (npm)
- Aug 14, 2025
Malicious code in baytech (npm)
- Aug 14, 2025
Malicious code in bayridge (npm)
- Aug 14, 2025
Malicious code in bayonet-js-sdk (npm)
- Aug 14, 2025
Malicious code in baymax-logger (npm)
- Aug 14, 2025
Malicious code in bayesdem (npm)
- Aug 14, 2025
Malicious code in battleaxe (npm)
- Aug 14, 2025
Malicious code in batonbots (npm)
- Aug 14, 2025
Malicious code in batman-rails (npm)
- Aug 14, 2025
Malicious code in batchsms (npm)
- Aug 14, 2025
Malicious code in batarim (npm)
- Aug 14, 2025
Malicious code in basske (npm)
- Aug 14, 2025
Malicious code in basilfca (npm)
Page 6110 of 7,293