Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,212 total in npm · sorted newest first- Aug 14, 2025
Malicious code in repository-semantic-ui-spinner-barnard (npm)
- Aug 14, 2025
Malicious code in repository-protractor-eclipse-proxima (npm)
- Aug 14, 2025
Malicious code in repository-protoplanetarydisk-extremophile-luna (npm)
- Aug 14, 2025
Malicious code in repository-holography-slidev-fusion (npm)
- Aug 14, 2025
Malicious code in repository-command-antd-webdriver-mocha (npm)
- Aug 14, 2025
Malicious code in repository-comet-innercore-oscillation (npm)
- Aug 14, 2025
Malicious code in reportwebvitals (npm)
- Aug 14, 2025
Malicious code in reports-ux (npm)
- Aug 14, 2025
Malicious code in reports-angular-api (npm)
- Aug 14, 2025
Malicious code in reportify_api (npm)
- Aug 14, 2025
Malicious code in reportdoc (npm)
- Aug 14, 2025
Malicious code in report-test-private-xml-fast (npm)
- Aug 14, 2025
Malicious code in repong (npm)
- Aug 14, 2025
Malicious code in repoform (npm)
- Aug 14, 2025
Malicious code in repoadm (npm)
- Aug 14, 2025
Malicious code in repo-package-stats (npm)
- Aug 14, 2025
Malicious code in replybox (npm)
- Aug 14, 2025
Malicious code in replitstalk (npm)
- Aug 14, 2025
Malicious code in rephlect (npm)
- Aug 14, 2025
Malicious code in repaso (npm)
- Aug 14, 2025
Malicious code in rentshare (npm)
- Aug 14, 2025
Malicious code in RentalAdvantage (npm)
- Aug 14, 2025
Malicious code in renimages (npm)
- Aug 14, 2025
Malicious code in rendimg (npm)
- Aug 14, 2025
Malicious code in render-loop (npm)
- Aug 14, 2025
Malicious code in renamev (npm)
- Aug 14, 2025
Malicious code in remote-inp (npm)
- Aug 14, 2025
Malicious code in remix-oxygen (npm)
- Aug 14, 2025
Malicious code in reminise (npm)
- Aug 14, 2025
Malicious code in remigame (npm)
- Aug 14, 2025
Malicious code in remark-spectron-protractor-epigenetics (npm)
- Aug 14, 2025
Malicious code in remark-robotics-nebula-nucleosynthesis (npm)
- Aug 14, 2025
Malicious code in remark-parsec-exoplanet-stop (npm)
- Aug 14, 2025
Malicious code in remark-commitizen-sirius-css-loader (npm)
- Aug 14, 2025
Malicious code in remark-chakra-ui-neptune-parsec (npm)
- Aug 14, 2025
Malicious code in remark-betelgeuse-shelljs-stream (npm)
- Aug 14, 2025
Malicious code in remark-algol-blackhole-filament (npm)
- Aug 14, 2025
Malicious code in reliease-release (npm)
- Aug 14, 2025
Malicious code in relectron (npm)
- Aug 14, 2025
Malicious code in release-to-github (npm)
- Aug 14, 2025
Malicious code in release-it-whitedwarf-taurus-hapi (npm)
- Aug 14, 2025
Malicious code in release-it-ultra-transport-eslint-config (npm)
- Aug 14, 2025
Malicious code in release-it-perseus-prettier-plugin-markdown-leda (npm)
- Aug 14, 2025
Malicious code in release-it-nebula-init-scripts (npm)
- Aug 14, 2025
Malicious code in release-it-exobiology-fork-aether (npm)
- Aug 14, 2025
Malicious code in release-it-aether-equinox-miranda (npm)
- Aug 14, 2025
Malicious code in relay-typeorm-norma-nova (npm)
- Aug 14, 2025
Malicious code in relay-thuban-geckodriver-technosignature (npm)
- Aug 14, 2025
Malicious code in relay-test (npm)
- Aug 14, 2025
Malicious code in relay-buffer-perseus-nanotechnology (npm)
Page 5380 of 6,665