Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,212 total in npm · sorted newest first- Aug 14, 2025
Malicious code in river-volcano-srq745-project (npm)
- Aug 14, 2025
Malicious code in river-taxso-b7qew-quartz-project (npm)
- Aug 14, 2025
Malicious code in river-rose-krq702-project (npm)
- Aug 14, 2025
Malicious code in river-pebble-duy582-project (npm)
- Aug 14, 2025
Malicious code in river-myth-zwo360-project (npm)
- Aug 14, 2025
Malicious code in river-mock (npm)
- Aug 14, 2025
Malicious code in river-koala-srn764-project (npm)
- Aug 14, 2025
Malicious code in river-jacket-cho336-project (npm)
- Aug 14, 2025
Malicious code in river-ikw7h-wovwe-ice-project (npm)
- Aug 14, 2025
Malicious code in river-h9l0h-8z1pt-amber-project (npm)
- Aug 14, 2025
Malicious code in river-forest-fcs406-project (npm)
- Aug 14, 2025
Malicious code in river-fjord-djc041-project (npm)
- Aug 14, 2025
Malicious code in river-emerald-qlg835-project (npm)
- Aug 14, 2025
Malicious code in river-bqt84-b4bau-echo-project (npm)
- Aug 14, 2025
Malicious code in river-boulder-bhj193-project (npm)
- Aug 14, 2025
Malicious code in river-blossom-ece291-project (npm)
- Aug 14, 2025
Malicious code in river-acorn-pvm996-project (npm)
- Aug 14, 2025
Malicious code in river-a80qk-j2wms-celestial-project (npm)
- Aug 14, 2025
Malicious code in ritz (npm)
- Aug 14, 2025
Malicious code in ritadagaz (npm)
- Aug 14, 2025
Malicious code in riskudalserv (npm)
- Aug 14, 2025
Malicious code in Risks-Tables (npm)
- Aug 14, 2025
Malicious code in risklmtnlifecycleserv (npm)
- Aug 14, 2025
Malicious code in riskfalifecycleserv (npm)
- Aug 14, 2025
Malicious code in riskdash (npm)
- Aug 14, 2025
Malicious code in risdjango (npm)
- Aug 14, 2025
Malicious code in risc-zero-developer-website (npm)
- Aug 14, 2025
Malicious code in riqra (npm)
- Aug 14, 2025
Malicious code in ripple_ysgjw_yxjcy_unicorn (npm)
- Aug 14, 2025
Malicious code in ripple_ysfme_4zhsn_dusk (npm)
- Aug 14, 2025
Malicious code in ripple_pxq2o_9r9vo_fireworks (npm)
- Aug 14, 2025
Malicious code in ripple_mix89_tksex_tundra (npm)
- Aug 14, 2025
Malicious code in ripple_eivs9_e4ewn_yosemite (npm)
- Aug 14, 2025
Malicious code in ripple_ditsx_n6del_quartz (npm)
- Aug 14, 2025
Malicious code in ripple-zebra-dio025-project (npm)
- Aug 14, 2025
Malicious code in ripple-yacht-ebt803-project (npm)
- Aug 14, 2025
Malicious code in ripple-xylophone-hbq101-project (npm)
- Aug 14, 2025
Malicious code in ripple-xerox-cal129-project (npm)
- Aug 14, 2025
Malicious code in ripple-xclia-u8axy-spark-project (npm)
- Aug 14, 2025
Malicious code in ripple-whale-roo897-project (npm)
- Aug 14, 2025
Malicious code in ripple-w2laf-r1w2v-jungle-project (npm)
- Aug 14, 2025
Malicious code in ripple-savanna-mdp191-project (npm)
- Aug 14, 2025
Malicious code in ripple-pebble-ecr284-project (npm)
- Aug 14, 2025
Malicious code in ripple-oyt82-myvl8-moonstone-project (npm)
- Aug 14, 2025
Malicious code in ripple-orangutan-eqe533-project (npm)
- Aug 14, 2025
Malicious code in ripple-nebula-lkr586-project (npm)
- Aug 14, 2025
Malicious code in ripple-kite-rnc131-project (npm)
- Aug 14, 2025
Malicious code in ripple-glide-gkc204-project (npm)
- Aug 14, 2025
Malicious code in ripple-ct2fr-z4jwe-echo-project (npm)
- Aug 14, 2025
Malicious code in ripple-blossom-uxv616-project (npm)
Page 5376 of 6,665