Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,212 total in npm · sorted newest first- Aug 14, 2025
Malicious code in respace-theme-dark (npm)
- Aug 14, 2025
Malicious code in respace-preset-nus (npm)
- Aug 14, 2025
Malicious code in respace-core (npm)
- Aug 14, 2025
Malicious code in respace-common (npm)
- Aug 14, 2025
Malicious code in respace-cli (npm)
- Aug 14, 2025
Malicious code in resource-search (npm)
- Aug 14, 2025
Malicious code in resource-deployment (npm)
- Aug 14, 2025
Malicious code in resonance-xenium-mpk484-project (npm)
- Aug 14, 2025
Malicious code in resonance-socketio-pulsar-meteor (npm)
- Aug 14, 2025
Malicious code in resonance-pulse-dpl266-project (npm)
- Aug 14, 2025
Malicious code in resonance-magnetar-browserify-carpo (npm)
- Aug 14, 2025
Malicious code in resolvers-uglify-js-exobiology-subduction (npm)
- Aug 14, 2025
Malicious code in resolvers-pyxis-chakra-ui-scripts (npm)
- Aug 14, 2025
Malicious code in resolvers-prettier-stylelint-quasar-bulma (npm)
- Aug 14, 2025
Malicious code in resolvers-less-loader-fornax-castor (npm)
- Aug 14, 2025
Malicious code in resolvers-gridsome-ini-borealis (npm)
- Aug 14, 2025
Malicious code in resolve-upsilon-integer-resolve-balance (npm)
- Aug 14, 2025
Malicious code in resolve-sandbox-export-daemon-gamma (npm)
- Aug 14, 2025
Malicious code in researcher-frontend-synack (npm)
- Aug 14, 2025
Malicious code in research (npm)
- Aug 14, 2025
Malicious code in rescripts (npm)
- Aug 14, 2025
Malicious code in resaline (npm)
- Aug 14, 2025
Malicious code in rerecipe (npm)
- Aug 14, 2025
Malicious code in reqyests (npm)
- Aug 14, 2025
Malicious code in reqyest (npm)
- Aug 14, 2025
Malicious code in requuest (npm)
- Aug 14, 2025
Malicious code in requst (npm)
- Aug 14, 2025
Malicious code in requset (npm)
- Aug 14, 2025
Malicious code in require-sdk (npm)
- Aug 14, 2025
Malicious code in require-ports (npm)
- Aug 14, 2025
Malicious code in require-port (npm)
- Aug 14, 2025
Malicious code in requetst (npm)
- Aug 14, 2025
Malicious code in requets (npm)
- Aug 14, 2025
Malicious code in requet (npm)
- Aug 14, 2025
Malicious code in requestt (npm)
- Aug 14, 2025
Malicious code in request-technocracy-ceres-biotechnology (npm)
- Aug 14, 2025
Malicious code in request-sentry (npm)
- Aug 14, 2025
Malicious code in request-promis (npm)
- Aug 14, 2025
Malicious code in request-process-readable-jovian (npm)
- Aug 14, 2025
Malicious code in request-ophiuchus-proxima-pyxis (npm)
- Aug 14, 2025
Malicious code in request-loger (npm)
- Aug 14, 2025
Malicious code in request-figures-winston-biogeochemistry (npm)
- Aug 14, 2025
Malicious code in requesst (npm)
- Aug 14, 2025
Malicious code in reques (npm)
- Aug 14, 2025
Malicious code in requeest (npm)
- Aug 14, 2025
Malicious code in reqquest (npm)
- Aug 14, 2025
Malicious code in reqest (npm)
- Aug 14, 2025
Malicious code in reqct (npm)
- Aug 14, 2025
Malicious code in repotil (npm)
- Aug 14, 2025
Malicious code in reposte (npm)
Page 5379 of 6,665