Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,214 total in npm · sorted newest first- Aug 14, 2025
Malicious code in roldev (npm)
- Aug 14, 2025
Malicious code in rokurterm (npm)
- Aug 14, 2025
Malicious code in rodzilla (npm)
- Aug 14, 2025
Malicious code in rodsdep (npm)
- Aug 14, 2025
Malicious code in rocnroll (npm)
- Aug 14, 2025
Malicious code in rocksbot (npm)
- Aug 14, 2025
Malicious code in rockgod (npm)
- Aug 14, 2025
Malicious code in rocket_cent_api (npm)
- Aug 14, 2025
Malicious code in rocket-xanthus-changelog-quark (npm)
- Aug 14, 2025
Malicious code in rocket-callback-bellatrix-typeorm (npm)
- Aug 14, 2025
Malicious code in rocket-antares-impulse-envconfig (npm)
- Aug 14, 2025
Malicious code in rocket-accretion-airbnb-geochronology (npm)
- Aug 14, 2025
Malicious code in rockdios (npm)
- Aug 14, 2025
Malicious code in rocephin (npm)
- Aug 14, 2025
Malicious code in robust-free-bootstrap-admin-template (npm)
- Aug 14, 2025
Malicious code in robtium (npm)
- Aug 14, 2025
Malicious code in robovm (npm)
- Aug 14, 2025
Malicious code in robotvn (npm)
- Aug 14, 2025
Malicious code in robotkittens-gsap (npm)
- Aug 14, 2025
Malicious code in robotec (npm)
- Aug 14, 2025
Malicious code in robotdb (npm)
- Aug 14, 2025
Malicious code in robochan (npm)
- Aug 14, 2025
Malicious code in roblab (npm)
- Aug 14, 2025
Malicious code in robinet (npm)
- Aug 14, 2025
Malicious code in robbie-visio-sdk (npm)
- Aug 14, 2025
Malicious code in roardnys (npm)
- Aug 14, 2025
Malicious code in roady (npm)
- Aug 14, 2025
Malicious code in rns-parser (npm)
- Aug 14, 2025
Malicious code in rnnoise-wasm (npm)
- Aug 14, 2025
Malicious code in rngblpszdjxuiwoe (npm)
- Aug 14, 2025
Malicious code in rndtable (npm)
- Aug 14, 2025
Malicious code in rname (npm)
- Aug 14, 2025
Malicious code in rn-unacademy-player (npm)
- Aug 14, 2025
Malicious code in rn-native-toast (npm)
- Aug 14, 2025
Malicious code in rmpbeta (npm)
- Aug 14, 2025
Malicious code in rmp-api (npm)
- Aug 14, 2025
Malicious code in rmftests (npm)
- Aug 14, 2025
Malicious code in rmdhqlesycfuanwk (npm)
- Aug 14, 2025
Malicious code in rmartinez (npm)
- Aug 14, 2025
Malicious code in rlogcat (npm)
- Aug 14, 2025
Malicious code in rlictd (npm)
- Aug 14, 2025
Malicious code in rlectron (npm)
- Aug 14, 2025
Malicious code in rkhbytecigpvfnqm (npm)
- Aug 14, 2025
Malicious code in rkakbq (npm)
- Aug 14, 2025
Malicious code in riyu-xuexi-jiaming-biaozhu-erlingyiwulingwu-erlingyiliulingsi (npm)
- Aug 14, 2025
Malicious code in riyu-xuexi-jiaming-biaozhu-erlingyisiyiling-erlingyiwulingsi (npm)
- Aug 14, 2025
Malicious code in riyu-xuexi-jiaming-biaozhu-erlingyiqilingqi-erlingyiqiyier (npm)
- Aug 14, 2025
Malicious code in riverpy (npm)
- Aug 14, 2025
Malicious code in river-yacht-znh979-project (npm)
- Aug 14, 2025
Malicious code in river-xkupf-tp21l-zephyr-project (npm)
Page 5375 of 6,665