Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,214 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ruevents (npm)
- Aug 14, 2025
Malicious code in rudi-ubi2-breki (npm)
- Aug 14, 2025
Malicious code in rudi-saguer59-sukiwir (npm)
- Aug 14, 2025
Malicious code in rudi-papeda60-breki (npm)
- Aug 14, 2025
Malicious code in rudi-lumpur28-sukiwir (npm)
- Aug 14, 2025
Malicious code in rudi-kembang47-breki (npm)
- Aug 14, 2025
Malicious code in rudi-dradag69-sukiwir (npm)
- Aug 14, 2025
Malicious code in rubytest (npm)
- Aug 14, 2025
Malicious code in rubytask (npm)
- Aug 14, 2025
Malicious code in rubyore (npm)
- Aug 14, 2025
Malicious code in rubymdp (npm)
- Aug 14, 2025
Malicious code in rubyheap (npm)
- Aug 14, 2025
Malicious code in rubyhead (npm)
- Aug 14, 2025
Malicious code in rubygrep (npm)
- Aug 14, 2025
Malicious code in rubyfile (npm)
- Aug 14, 2025
Malicious code in rubyduino (npm)
- Aug 14, 2025
Malicious code in rubycoin (npm)
- Aug 14, 2025
Malicious code in ruby-limiter (npm)
- Aug 14, 2025
Malicious code in ruby-kafka-oauth-client (npm)
- Aug 14, 2025
Malicious code in rubocop-sorbet (npm)
- Aug 14, 2025
Malicious code in rubocop-shopify (npm)
- Aug 14, 2025
Malicious code in rubix-ng2 (npm)
- Aug 14, 2025
Malicious code in rubequ (npm)
- Aug 14, 2025
Malicious code in rubalto (npm)
- Aug 14, 2025
Malicious code in ru.rostel (npm)
- Aug 14, 2025
Malicious code in rtyrtrtw1 (npm)
- Aug 14, 2025
Malicious code in rtwqwubna1 (npm)
- Aug 14, 2025
Malicious code in rtsoccer (npm)
- Aug 14, 2025
Malicious code in rts-sdk-api-nodejs (npm)
- Aug 14, 2025
Malicious code in rtpve (npm)
- Aug 14, 2025
Malicious code in rtotime (npm)
- Aug 14, 2025
Malicious code in rtlvod (npm)
- Aug 14, 2025
Malicious code in rtkthesis (npm)
- Aug 14, 2025
Malicious code in rtcsaves (npm)
- Aug 14, 2025
Malicious code in rtchose (npm)
- Aug 14, 2025
Malicious code in rtc-js-sdk (npm)
- Aug 14, 2025
Malicious code in rtc-js-demo (npm)
- Aug 14, 2025
Malicious code in rt2s (npm)
- Aug 14, 2025
Malicious code in rsulley (npm)
- Aug 14, 2025
Malicious code in rstm (npm)
- Aug 14, 2025
Malicious code in rssruby (npm)
- Aug 14, 2025
Malicious code in rssnews (npm)
- Aug 14, 2025
Malicious code in rssmusic (npm)
- Aug 14, 2025
Malicious code in rssmind (npm)
- Aug 14, 2025
Malicious code in rssfeeder (npm)
- Aug 14, 2025
Malicious code in rssboard (npm)
- Aug 14, 2025
Malicious code in rssauth (npm)
- Aug 14, 2025
Malicious code in rso-example-app (npm)
- Aug 14, 2025
Malicious code in rsiconfig (npm)
- Aug 14, 2025
Malicious code in rs-thrift2ts-win32-x64-msvc (npm)
Page 5371 of 6,665