Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,214 total in npm · sorted newest first- Aug 14, 2025
Malicious code in saas-client-oc-v6 (npm)
- Aug 14, 2025
Malicious code in s8d (npm)
- Aug 14, 2025
Malicious code in s7dzdggxm9v29ki2s1cykztjzveurn7o (npm)
- Aug 14, 2025
Malicious code in s4-node-test-backend (npm)
- Aug 14, 2025
Malicious code in s360.auth.pkg (npm)
- Aug 14, 2025
Malicious code in s3-lister-js (npm)
- Aug 14, 2025
Malicious code in s1e7ok (npm)
- Aug 14, 2025
Malicious code in s03kx5 (npm)
- Aug 14, 2025
Malicious code in rzstav (npm)
- Aug 14, 2025
Malicious code in rzpacker (npm)
- Aug 14, 2025
Malicious code in rznyvk (npm)
- Aug 14, 2025
Malicious code in ryoucss (npm)
- Aug 14, 2025
Malicious code in rxrwimnw (npm)
- Aug 14, 2025
Malicious code in rxlocal-pdk (npm)
- Aug 14, 2025
Malicious code in rxkfbkhivydeusga (npm)
- Aug 14, 2025
Malicious code in rwords (npm)
- Aug 14, 2025
Malicious code in rwiimote (npm)
- Aug 14, 2025
Malicious code in rwgps-ui (npm)
- Aug 14, 2025
Malicious code in rwdisk (npm)
- Aug 14, 2025
Malicious code in rw-family-auth (npm)
- Aug 14, 2025
Malicious code in rvxknfomuysjzwlc (npm)
- Aug 14, 2025
Malicious code in rvuset (npm)
- Aug 14, 2025
Malicious code in rvi-http-node-server (npm)
- Aug 14, 2025
Malicious code in rvdtest (npm)
- Aug 14, 2025
Malicious code in rv99k3 (npm)
- Aug 14, 2025
Malicious code in rv-config-helper (npm)
- Aug 14, 2025
Malicious code in rusnames (npm)
- Aug 14, 2025
Malicious code in ruserba (npm)
- Aug 14, 2025
Malicious code in RunwayLogger (npm)
- Aug 14, 2025
Malicious code in runtime_client (npm)
- Aug 14, 2025
Malicious code in runtime-bundle-armi (npm)
- Aug 14, 2025
Malicious code in runeworld (npm)
- Aug 14, 2025
Malicious code in runescpae (npm)
- Aug 14, 2025
Malicious code in runbitman (npm)
- Aug 14, 2025
Malicious code in run-serially (npm)
- Aug 14, 2025
Malicious code in run-script-testcafe-eslint-config-palynology (npm)
- Aug 14, 2025
Malicious code in run-script-meissa-charon-sedna (npm)
- Aug 14, 2025
Malicious code in run-script-command-celeste-eris (npm)
- Aug 14, 2025
Malicious code in run-script-bootes-lithosphere-electron-builder (npm)
- Aug 14, 2025
Malicious code in run-script-astrophysics-tool-cosmochemistry (npm)
- Aug 14, 2025
Malicious code in run-paralelly (npm)
- Aug 14, 2025
Malicious code in run-dev (npm)
- Aug 14, 2025
Malicious code in run-after (npm)
- Aug 14, 2025
Malicious code in rule34news (npm)
- Aug 14, 2025
Malicious code in rule-editor (npm)
- Aug 14, 2025
Malicious code in rukovsky (npm)
- Aug 14, 2025
Malicious code in ruiaylin (npm)
- Aug 14, 2025
Malicious code in rui-types (npm)
- Aug 14, 2025
Malicious code in ruglan (npm)
- Aug 14, 2025
Malicious code in ruffer-xor (npm)
Page 5370 of 6,665