Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,212 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ripple-7p2bv-s8wxk-pebble-project (npm)
- Aug 14, 2025
Malicious code in ripple-1dlu7-12q0i-unicorn-project (npm)
- Aug 14, 2025
Malicious code in riotbar-react (npm)
- Aug 14, 2025
Malicious code in rinobot-plugin-interactive-heatmap (npm)
- Aug 14, 2025
Malicious code in rinobot-heatmap (npm)
- Aug 14, 2025
Malicious code in ringfs (npm)
- Aug 14, 2025
Malicious code in ringcentral-web-modules (npm)
- Aug 14, 2025
Malicious code in rinchi (npm)
- Aug 14, 2025
Malicious code in rina-tempe81-breki (npm)
- Aug 14, 2025
Malicious code in rina-tahu10-breki (npm)
- Aug 14, 2025
Malicious code in rina-rujak9-breki (npm)
- Aug 14, 2025
Malicious code in rina-miebogor94-sukiwir (npm)
- Aug 14, 2025
Malicious code in rimraff (npm)
- Aug 14, 2025
Malicious code in rimraf-string-aquarius-query (npm)
- Aug 14, 2025
Malicious code in rimraf-glob (npm)
- Aug 14, 2025
Malicious code in riipen-web (npm)
- Aug 14, 2025
Malicious code in rihcatxnmdzybefk (npm)
- Aug 14, 2025
Malicious code in rigel-subduction-eclipse-nucleosynthesis (npm)
- Aug 14, 2025
Malicious code in rigel-mocha-element-ui-cassini (npm)
- Aug 14, 2025
Malicious code in rifqi-takokak95-kuki (npm)
- Aug 14, 2025
Malicious code in rifqi-soto36-sukiwir (npm)
- Aug 14, 2025
Malicious code in rifqi-peyek62-sukiwir (npm)
- Aug 14, 2025
Malicious code in rifqi-oblok11-sukiwir (npm)
- Aug 14, 2025
Malicious code in rifqi-kue80-sukiwir (npm)
- Aug 14, 2025
Malicious code in rifqi-kemplang52-breki (npm)
- Aug 14, 2025
Malicious code in rifqi-jengkol1-kuki (npm)
- Aug 14, 2025
Malicious code in rifler-lego-i18n-tools (npm)
- Aug 14, 2025
Malicious code in rifleman (npm)
- Aug 14, 2025
Malicious code in ridge-trail-dni560-project (npm)
- Aug 14, 2025
Malicious code in ridesapp (npm)
- Aug 14, 2025
Malicious code in rideapp (npm)
- Aug 14, 2025
Malicious code in richg_module (npm)
- Aug 14, 2025
Malicious code in ricfile (npm)
- Aug 14, 2025
Malicious code in ricecake (npm)
- Aug 14, 2025
Malicious code in ricebox (npm)
- Aug 14, 2025
Malicious code in riana-tomat27-sukiwir (npm)
- Aug 14, 2025
Malicious code in riana-telur52-sukiwir (npm)
- Aug 14, 2025
Malicious code in riana-sate73-sukiwir (npm)
- Aug 14, 2025
Malicious code in riana-lumpur95-breki (npm)
- Aug 14, 2025
Malicious code in riana-gandul31-kuki (npm)
- Aug 14, 2025
Malicious code in riadmc (npm)
- Aug 14, 2025
Malicious code in rhynpm (npm)
5 compromised versions
- Aug 14, 2025
Malicious code in rhpdlmkazfjkogxc (npm)
- Aug 14, 2025
Malicious code in rhodemap (npm)
- Aug 14, 2025
Malicious code in rho-warn-rain-transpile-optimize (npm)
- Aug 14, 2025
Malicious code in rho-rho-runtime-small-root (npm)
- Aug 14, 2025
Malicious code in rho-private-string-key-mu (npm)
- Aug 14, 2025
Malicious code in rhinode (npm)
- Aug 14, 2025
Malicious code in rhinobot (npm)
- Aug 14, 2025
Malicious code in rgrong (npm)
Page 5377 of 6,665