Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in babel-pulsar-eventhoriz-kaus (npm)
- Aug 14, 2025
Malicious code in babel-preset-webpack-es2015 (npm)
- Aug 14, 2025
Malicious code in babel-preset-tedium (npm)
- Aug 14, 2025
Malicious code in babel-preset-pp-react (npm)
- Aug 14, 2025
Malicious code in babel-preset-modern (npm)
- Aug 14, 2025
Malicious code in babel-preset-env-cx (npm)
- Aug 14, 2025
Malicious code in babel-preset-env-2 (npm)
- Aug 14, 2025
Malicious code in babel-preset-data-ui (npm)
- Aug 14, 2025
Malicious code in babel-preset-animoto-components (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-raptor-template (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-raptor-renderer (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-raptor-class (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-inject-template (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-html-template (npm)
- Aug 14, 2025
Malicious code in babel-plugin-transform-decorator-props (npm)
- Aug 14, 2025
Malicious code in babel-plugin-throws-helper (npm)
- Aug 14, 2025
Malicious code in babel-plugin-template-literals-qos (npm)
- Aug 14, 2025
Malicious code in babel-plugin-tedium (npm)
- Aug 14, 2025
Malicious code in babel-plugin-server-remove (npm)
- Aug 14, 2025
Malicious code in babel-plugin-mail-transform-inline-imports-commonjs (npm)
- Aug 14, 2025
Malicious code in babel-pal (npm)
- Aug 14, 2025
Malicious code in babel-npm-publish (npm)
- Aug 14, 2025
Malicious code in babel-npm-install (npm)
- Aug 14, 2025
Malicious code in babel-node (npm)
- Aug 14, 2025
Malicious code in babel-magnetar-solarnebula-capella (npm)
- Aug 14, 2025
Malicious code in babel-lyra-jest-apex (npm)
- Aug 14, 2025
Malicious code in babel-loqder (npm)
- Aug 14, 2025
Malicious code in babel-loadre (npm)
- Aug 14, 2025
Malicious code in babel-laoder (npm)
- Aug 14, 2025
Malicious code in babel-europa-cybernetics-yonder (npm)
- Aug 14, 2025
Malicious code in babel-antares-local-public (npm)
- Aug 14, 2025
Malicious code in ba-test (npm)
- Aug 14, 2025
Malicious code in b5ffer-xor (npm)
- Aug 14, 2025
Malicious code in b2w-log (npm)
- Aug 14, 2025
Malicious code in b04y1b (npm)
- Aug 14, 2025
Malicious code in azurewebserverlogstosql (npm)
- Aug 14, 2025
Malicious code in azuremono (npm)
- Aug 14, 2025
Malicious code in azurefilter (npm)
- Aug 14, 2025
Malicious code in azurea (npm)
- Aug 14, 2025
Malicious code in azure-zmzzw-wtq35-crystal-project (npm)
- Aug 14, 2025
Malicious code in azure-wtint-vgql6-echo-project (npm)
- Aug 14, 2025
Malicious code in azure-uh9jg-05iqv-serenity-project (npm)
- Aug 14, 2025
Malicious code in azure-twd7a-qqy6v-ember-project (npm)
- Aug 14, 2025
Malicious code in azure-q679f-yokie-lunar-project (npm)
- Aug 14, 2025
Malicious code in azure-o849q-lxz68-flora-project (npm)
- Aug 14, 2025
Malicious code in azure-cf4v6-p75nc-uplift-project (npm)
- Aug 14, 2025
Malicious code in azure-azzus-78pnd-quasar-project (npm)
- Aug 14, 2025
Malicious code in azunyan (npm)
- Aug 14, 2025
Malicious code in aztogh (npm)
- Aug 14, 2025
Malicious code in azmovies (npm)
Page 6115 of 7,293