Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,214 total in npm · sorted newest first- Aug 14, 2025
Malicious code in rrjcui-weapp (npm)
- Aug 14, 2025
Malicious code in rrissues (npm)
- Aug 14, 2025
Malicious code in rrgod (npm)
- Aug 14, 2025
Malicious code in rrequest (npm)
- Aug 14, 2025
Malicious code in rrenderer (npm)
- Aug 14, 2025
Malicious code in rredis (npm)
- Aug 14, 2025
Malicious code in rreact (npm)
- Aug 14, 2025
Malicious code in rqzixwhtgnkfcpoa (npm)
- Aug 14, 2025
Malicious code in rqrauhvmra__tobi (npm)
- Aug 14, 2025
Malicious code in rqeuest (npm)
- Aug 14, 2025
Malicious code in rpotato (npm)
- Aug 14, 2025
Malicious code in rplanit (npm)
- Aug 14, 2025
Malicious code in rpimotion (npm)
- Aug 14, 2025
Malicious code in rpilib (npm)
- Aug 14, 2025
Malicious code in rph-tools (npm)
- Aug 14, 2025
Malicious code in rpcombat (npm)
- Aug 14, 2025
Malicious code in rpc-mock-server (npm)
- Aug 14, 2025
Malicious code in rozily (npm)
- Aug 14, 2025
Malicious code in rox-browser-test (npm)
- Aug 14, 2025
Malicious code in rowshow (npm)
- Aug 14, 2025
Malicious code in rowling (npm)
- Aug 14, 2025
Malicious code in row5it (npm)
- Aug 14, 2025
Malicious code in route-theta-sanitize-iota-await (npm)
- Aug 14, 2025
Malicious code in route-promise-class-file-encode (npm)
- Aug 14, 2025
Malicious code in route-air-private-static-bash (npm)
- Aug 14, 2025
Malicious code in rouser (npm)
- Aug 14, 2025
Malicious code in rougemagz2025 (npm)
- Aug 14, 2025
Malicious code in rouffj (npm)
- Aug 14, 2025
Malicious code in rou4ng (npm)
- Aug 14, 2025
Malicious code in rotavitheme (npm)
- Aug 14, 2025
Malicious code in rotatable_secret (npm)
- Aug 14, 2025
Malicious code in rosterweb (npm)
- Aug 14, 2025
Malicious code in rospozor (npm)
- Aug 14, 2025
Malicious code in roseperks (npm)
- Aug 14, 2025
Malicious code in roselle (npm)
- Aug 14, 2025
Malicious code in rose_sfrzr_lpd8j_dusk (npm)
- Aug 14, 2025
Malicious code in rose_riuft_1wtsy_kale (npm)
- Aug 14, 2025
Malicious code in rose_iliqk_mwxdr_kaleidoscope (npm)
- Aug 14, 2025
Malicious code in rose_fo5fs_pwkde_tempest (npm)
- Aug 14, 2025
Malicious code in rose_d6zyd_r6s3n_yosemite (npm)
- Aug 14, 2025
Malicious code in rose_ajfri_hehwo_obelisk (npm)
- Aug 14, 2025
Malicious code in rose-y3znm-d3hdt-unity-project (npm)
- Aug 14, 2025
Malicious code in rose-whirlpool-abs347-project (npm)
- Aug 14, 2025
Malicious code in rose-tetg8-xcllx-thunder-project (npm)
- Aug 14, 2025
Malicious code in rose-pjwdj-hhisj-quasar-project (npm)
- Aug 14, 2025
Malicious code in rose-peacock-pms134-project (npm)
- Aug 14, 2025
Malicious code in rose-opal-sya256-project (npm)
- Aug 14, 2025
Malicious code in rose-nymph-esr138-project (npm)
- Aug 14, 2025
Malicious code in rose-myth-cqc821-project (npm)
- Aug 14, 2025
Malicious code in rose-koala-cxl197-project (npm)
Page 5372 of 6,665