Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in bullshittss (npm)
1 compromised version
- Jun 25, 2024
Malicious code in buildin (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in browserstack-docker-example (npm)
1 compromised version
- Jun 25, 2024
Malicious code in brkr-lib-components-react (npm)
1 compromised version
- Jun 25, 2024
Malicious code in braze-content-cards-inbox (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in brand-positioning-block (npm)
1 compromised version
- Jun 25, 2024
Malicious code in branch-to-cmsg (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in bpa-trello-dashboard (npm)
1 compromised version
- Jun 25, 2024
Malicious code in boxscorerepository (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in bouncycastle (npm)
1 compromised version
- Jun 25, 2024
Malicious code in borschik-webp-internal (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in bootstrap-sass-official (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in booking-react-slick (npm)
1 compromised version
- Jun 25, 2024
Malicious code in bonito-core (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in bolt-repo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in bmw.dealers.web (npm)
1 compromised version
- Jun 25, 2024
Malicious code in bloggerprem (npm)
1 compromised version
- Jun 25, 2024
Malicious code in blog_2021 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in bk-redux-client-middleware (npm)
1 compromised version
- Jun 25, 2024
Malicious code in bitcoin-inscript (npm)
1 compromised version
- Jun 25, 2024
Malicious code in biputility (npm)
1 compromised version
- Jun 25, 2024
Malicious code in bifrost-calculator (npm)
1 compromised version
- Jun 25, 2024
Malicious code in bem-mvc-direct (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in bc-baseline (npm)
9 compromised versions
- Jun 25, 2024
Malicious code in basencrypt (npm)
1 compromised version
- Jun 25, 2024
Malicious code in basecrypt (npm)
1 compromised version
- Jun 25, 2024
Malicious code in barrio_sass (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ban-notifier6 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ballerina-grammar (npm)
1 compromised version
- Jun 25, 2024
Malicious code in backbone.picky (npm)
1 compromised version
- Jun 25, 2024
Malicious code in backbone-input-view (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in babel-transformer (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in baas-admin-sdk (npm)
7 compromised versions
- Jun 25, 2024
Malicious code in azure-rest-api-specs-tests (npm)
1 compromised version
- Jun 25, 2024
Malicious code in azure-rest-api-specs-eng-tools (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in ayp-tool (npm)
1 compromised version
- Jun 25, 2024
Malicious code in axp-api-middleware (npm)
1 compromised version
- Jun 25, 2024
Malicious code in axle-react-native-common-dependencies (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in axle-react-native-app-sync-client (npm)
1 compromised version
- Jun 25, 2024
Malicious code in aws-ecs-devops-using-aws-cdk (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in avx-web-core (npm)
1 compromised version
- Jun 25, 2024
Malicious code in avx-web-build (npm)
1 compromised version
- Jun 25, 2024
Malicious code in avx-javascript-testing (npm)
1 compromised version
- Jun 25, 2024
Malicious code in avro-to-typescript (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in avidan_vs_taylor (npm)
1 compromised version
- Jun 25, 2024
Malicious code in avalanche_compass_scoped (npm)
1 compromised version
- Jun 25, 2024
Malicious code in avalanche_compass_scope (npm)
1 compromised version
- Jun 25, 2024
Malicious code in auth0.net (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in audio-only-web (npm)
1 compromised version
- Jun 25, 2024
Malicious code in atsconsole.controller (npm)
1 compromised version
Page 6717 of 7,293