Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,212 total in npm · sorted newest first- Aug 14, 2025
Malicious code in rgqunfxptycklvkz (npm)
- Aug 14, 2025
Malicious code in rgnhbpscqejkltvk (npm)
- Aug 14, 2025
Malicious code in rgbtlc (npm)
- Aug 14, 2025
Malicious code in rgbfade (npm)
- Aug 14, 2025
Malicious code in rg-guide (npm)
- Aug 14, 2025
Malicious code in rfs-styleguide (npm)
- Aug 14, 2025
Malicious code in rfghgfh (npm)
- Aug 14, 2025
Malicious code in rfc-folders (npm)
- Aug 14, 2025
Malicious code in rezmatrix (npm)
- Aug 14, 2025
Malicious code in rezigiusz (npm)
- Aug 14, 2025
Malicious code in rezbaz (npm)
- Aug 14, 2025
Malicious code in rexchan2139_tools (npm)
- Aug 14, 2025
Malicious code in rexalord (npm)
- Aug 14, 2025
Malicious code in rewindbbs (npm)
- Aug 14, 2025
Malicious code in rewadmin (npm)
- Aug 14, 2025
Malicious code in revinux (npm)
- Aug 14, 2025
Malicious code in review-length-stats (npm)
- Aug 14, 2025
Malicious code in reverb-event (npm)
- Aug 14, 2025
Malicious code in revenssis (npm)
- Aug 14, 2025
Malicious code in reveal-md-virtualreality-nodejs-equinox (npm)
- Aug 14, 2025
Malicious code in reveal-md-process-boson-boson (npm)
- Aug 14, 2025
Malicious code in reveal-md-genomics-blackhole-meissa (npm)
- Aug 14, 2025
Malicious code in reuimwubna (npm)
- Aug 14, 2025
Malicious code in reuest (npm)
- Aug 14, 2025
Malicious code in retrato (npm)
- Aug 14, 2025
Malicious code in retinal (npm)
- Aug 14, 2025
Malicious code in retfee3 (npm)
- Aug 14, 2025
Malicious code in retext-shopify (npm)
- Aug 14, 2025
Malicious code in retcodelog (npm)
- Aug 14, 2025
Malicious code in retallick (npm)
- Aug 14, 2025
Malicious code in retailershopperlens (npm)
- Aug 14, 2025
Malicious code in retail-ui-extensions-react (npm)
- Aug 14, 2025
Malicious code in retail-ui-extensions (npm)
- Aug 14, 2025
Malicious code in resumption (npm)
- Aug 14, 2025
Malicious code in resumegae (npm)
- Aug 14, 2025
Malicious code in resume-pad (npm)
- Aug 14, 2025
Malicious code in resttask (npm)
- Aug 14, 2025
Malicious code in restsims (npm)
- Aug 14, 2025
Malicious code in restlist (npm)
- Aug 14, 2025
Malicious code in restiks (npm)
- Aug 14, 2025
Malicious code in restframe (npm)
- Aug 14, 2025
Malicious code in restart-halley-semantic-ui-zooarchaeology (npm)
- Aug 14, 2025
Malicious code in restart-eslint-config-spectron-grunt (npm)
- Aug 14, 2025
Malicious code in restart-avior-pino-xenobiology (npm)
- Aug 14, 2025
Malicious code in rest-cosmos-convict-jupiter (npm)
- Aug 14, 2025
Malicious code in respont (npm)
- Aug 14, 2025
Malicious code in responsive-layout (npm)
- Aug 14, 2025
Malicious code in respite-zinnia-qie409-project (npm)
- Aug 14, 2025
Malicious code in respace-ui-layout (npm)
- Aug 14, 2025
Malicious code in respace-ui-component-picker (npm)
Page 5378 of 6,665