Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in bamboo-fox-jcq178-project (npm)
- Aug 14, 2025
Malicious code in bamboo-fox-dhc840-project (npm)
- Aug 14, 2025
Malicious code in bamboo-butterfly-dtt155-project (npm)
- Aug 14, 2025
Malicious code in bambang-ubi8-kuki (npm)
- Aug 14, 2025
Malicious code in bambang-tek48-kuki (npm)
- Aug 14, 2025
Malicious code in bambang-tahu59-sukiwir (npm)
- Aug 14, 2025
Malicious code in bambang-pisang81-breki (npm)
- Aug 14, 2025
Malicious code in bambang-oncom84-breki (npm)
- Aug 14, 2025
Malicious code in bambang-nasiuduk38-sukiwir (npm)
- Aug 14, 2025
Malicious code in bambang-kepok16-kuki (npm)
- Aug 14, 2025
Malicious code in bambang-gulai24-sukiwir (npm)
- Aug 14, 2025
Malicious code in bambang-gepuk23-sukiwir (npm)
- Aug 14, 2025
Malicious code in bambang-empal37-breki (npm)
- Aug 14, 2025
Malicious code in bam-barchart-list (npm)
- Aug 14, 2025
Malicious code in balpissue (npm)
- Aug 14, 2025
Malicious code in balloons (npm)
- Aug 14, 2025
Malicious code in ballast (npm)
- Aug 14, 2025
Malicious code in balance-rho-resolve-alpha-uglify (npm)
- Aug 14, 2025
Malicious code in balance-chi-decompress-chi-code (npm)
- Aug 14, 2025
Malicious code in baker-utils (npm)
- Aug 14, 2025
Malicious code in baker-services (npm)
- Aug 14, 2025
Malicious code in bakaloria (npm)
- Aug 14, 2025
Malicious code in baidutop (npm)
- Aug 14, 2025
Malicious code in baiauto (npm)
- Aug 14, 2025
Malicious code in bai2-generator (npm)
- Aug 14, 2025
Malicious code in bahrain (npm)
- Aug 14, 2025
Malicious code in baes-x (npm)
- Aug 14, 2025
Malicious code in baehello (npm)
- Aug 14, 2025
Malicious code in badvideo (npm)
- Aug 14, 2025
Malicious code in badgnet (npm)
- Aug 14, 2025
Malicious code in bad-spy-shell-report-assert (npm)
- Aug 14, 2025
Malicious code in bad-idea-express-backdoor (npm)
- Aug 14, 2025
Malicious code in bad-catch-stack-compile-query (npm)
- Aug 14, 2025
Malicious code in backupvbs (npm)
- Aug 14, 2025
Malicious code in backupish (npm)
- Aug 14, 2025
Malicious code in backup-decryptor (npm)
- Aug 14, 2025
Malicious code in backroute (npm)
- Aug 14, 2025
Malicious code in backoff2 (npm)
- Aug 14, 2025
Malicious code in backmain (npm)
- Aug 14, 2025
Malicious code in background-image (npm)
- Aug 14, 2025
Malicious code in backend-titan-solarnebula-epigenetics (npm)
- Aug 14, 2025
Malicious code in backend-sagitta-tethys-heliophysics (npm)
- Aug 14, 2025
Malicious code in backend-odin-parcel-meteor (npm)
- Aug 14, 2025
Malicious code in backend-eclipse-taurus-charon (npm)
- Aug 14, 2025
Malicious code in backblaze-frameio-common (npm)
- Aug 14, 2025
Malicious code in bable-loader (npm)
- Aug 14, 2025
Malicious code in babl (npm)
- Aug 14, 2025
Malicious code in babez-jij (npm)
- Aug 14, 2025
Malicious code in babel-sirius-extremophile-hermes (npm)
- Aug 14, 2025
Malicious code in babel-sequelize-pipe-volcanology (npm)
Page 6114 of 7,293