Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in cl.i-psinner (npm)
- Aug 19, 2022
Malicious code in ckfors (npm)
- Aug 19, 2022
Malicious code in chokdazr (npm)
- Aug 19, 2022
Malicious code in chartzj (npm)
- Aug 19, 2022
Malicious code in chanbfe (npm)
- Aug 19, 2022
Malicious code in chal (npm)
- Aug 19, 2022
Malicious code in cd5 (npm)
- Aug 19, 2022
Malicious code in canavs (npm)
- Aug 19, 2022
Malicious code in cam.flcase (npm)
- Aug 19, 2022
Malicious code in c6lipboady (npm)
- Aug 19, 2022
Malicious code in bytebufevr (npm)
- Aug 19, 2022
Malicious code in bxroccoli-funnqel (npm)
- Aug 19, 2022
Malicious code in bv4 (npm)
- Aug 19, 2022
Malicious code in bubird (npm)
- Aug 19, 2022
Malicious code in brsolve-from (npm)
- Aug 19, 2022
Malicious code in bostcs-perset-env (npm)
- Aug 19, 2022
Malicious code in boject-path (npm)
- Aug 19, 2022
Malicious code in bn.sj (npm)
- Aug 19, 2022
Malicious code in bignumbnev.jr (npm)
- Aug 19, 2022
Malicious code in bi9 (npm)
- Aug 19, 2022
Malicious code in bfrf (npm)
- Aug 19, 2022
Malicious code in bdfen (npm)
- Aug 19, 2022
Malicious code in bconffee-script (npm)
- Aug 19, 2022
Malicious code in baes64-js (npm)
- Aug 19, 2022
Malicious code in baelgenerbtor (npm)
- Aug 19, 2022
Malicious code in bael-plugin-syntax-dynramic-import (npm)
- Aug 19, 2022
Malicious code in babfl-ie2mplate (npm)
- Aug 19, 2022
Malicious code in babel-trasveres (npm)
- Aug 19, 2022
Malicious code in babel-pzugin-transform-es2015-modues-commonjs (npm)
- Aug 19, 2022
Malicious code in babel-pugif-sntax-jsx (npm)
- Aug 19, 2022
Malicious code in babel-preset-reatc (npm)
- Aug 19, 2022
Malicious code in babel-polyflil (npm)
- Aug 19, 2022
Malicious code in babel-plugin-transfvrm-rvntime (npm)
- Aug 19, 2022
Malicious code in babel-plugin-transform3react-remove-prop-t8pes (npm)
- Aug 19, 2022
Malicious code in babel-lugin-dynamic-i9port-node (npm)
- Aug 19, 2022
Malicious code in bab3el-regyster (npm)
- Aug 19, 2022
Malicious code in b4lesised (npm)
- Aug 19, 2022
Malicious code in awodr-wrap (npm)
- Aug 19, 2022
Malware in brsolve-from
1 compromised version
- Aug 19, 2022
Malware in bostcs-perset-env
1 compromised version
- Aug 19, 2022
Malware in babel-trasveres
1 compromised version
- Aug 19, 2022
Malware in babfl-ie2mplate
1 compromised version
- Aug 19, 2022
Malware in bv4
1 compromised version
- Aug 19, 2022
Malware in bytebufevr
1 compromised version
- Aug 19, 2022
Malware in clipobard
1 compromised version
- Aug 19, 2022
Malware in babel-plugin-transfvrm-rvntime
1 compromised version
- Aug 19, 2022
Malware in chokdazr
1 compromised version
- Aug 19, 2022
Malware in babel-preset-reatc
1 compromised version
- Aug 19, 2022
Malware in baes64-js
1 compromised version
- Aug 19, 2022
Malware in ckfors
1 compromised version
Page 7029 of 7,293