Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,212 total in npm · sorted newest first- Aug 14, 2025
Malicious code in relativity-web-utilities (npm)
- Aug 14, 2025
Malicious code in relativity-web-assets (npm)
- Aug 14, 2025
Malicious code in relation-release (npm)
- Aug 14, 2025
Malicious code in rejoice-opaline-dil653-project (npm)
- Aug 14, 2025
Malicious code in reject-uglify-phi-xml-quick (npm)
- Aug 14, 2025
Malicious code in reject-sun-wind-refactor-compress (npm)
- Aug 14, 2025
Malicious code in reject-sun-deserialize-runtime-emulate (npm)
- Aug 14, 2025
Malicious code in reject-stub-nu-long-delta (npm)
- Aug 14, 2025
Malicious code in reject-eta-xi-wind-query (npm)
- Aug 14, 2025
Malicious code in reject-book-execute-bash-code (npm)
- Aug 14, 2025
Malicious code in reiebruewe (npm)
- Aug 14, 2025
Malicious code in rehype-remark-neptune-europa (npm)
- Aug 14, 2025
Malicious code in rehype-redshift-aether-csrf (npm)
- Aug 14, 2025
Malicious code in rehype-parallax-superflare-resonance (npm)
- Aug 14, 2025
Malicious code in rehype-ora-norma-cosmos (npm)
- Aug 14, 2025
Malicious code in rehype-nova-higgs-leda (npm)
- Aug 14, 2025
Malicious code in rehype-config-gravitationalwave-cli (npm)
- Aug 14, 2025
Malicious code in rehabili (npm)
- Aug 14, 2025
Malicious code in regulus-petrology-zephyr-astrometry (npm)
- Aug 14, 2025
Malicious code in regulus-gravity-geochronology-superposition (npm)
- Aug 14, 2025
Malicious code in regulamin (npm)
- Aug 14, 2025
Malicious code in regpage (npm)
- Aug 14, 2025
Malicious code in registry-promise-quantumfoam-playwright (npm)
- Aug 14, 2025
Malicious code in registry-pino-solis-vulcan (npm)
- Aug 14, 2025
Malicious code in registry-oauth-vortex-hapi (npm)
- Aug 14, 2025
Malicious code in registry-got-babel-adonis (npm)
- Aug 14, 2025
Malicious code in regenrator (npm)
- Aug 14, 2025
Malicious code in regenraotr (npm)
- Aug 14, 2025
Malicious code in refskin (npm)
- Aug 14, 2025
Malicious code in refpcer (npm)
- Aug 14, 2025
Malicious code in reflogui (npm)
- Aug 14, 2025
Malicious code in refine-object (npm)
- Aug 14, 2025
Malicious code in refactoring_toolkit (npm)
- Aug 14, 2025
Malicious code in reequest (npm)
- Aug 14, 2025
Malicious code in reelmc (npm)
- Aug 14, 2025
Malicious code in reelcal (npm)
- Aug 14, 2025
Malicious code in reef_wamzb_s5ixg_illusion (npm)
- Aug 14, 2025
Malicious code in reef_5p1oq_sidm8_honey (npm)
- Aug 14, 2025
Malicious code in reef_4aspa_cj5ri_crystal (npm)
- Aug 14, 2025
Malicious code in reef_295jh_lbwwd_trill (npm)
- Aug 14, 2025
Malicious code in reef-zebra-lbj882-project (npm)
- Aug 14, 2025
Malicious code in reef-xerox-ygc139-project (npm)
- Aug 14, 2025
Malicious code in reef-xerophyte-el22 (npm)
- Aug 14, 2025
Malicious code in reef-whale-tbp602-project (npm)
- Aug 14, 2025
Malicious code in reef-whale-kpn090-project (npm)
- Aug 14, 2025
Malicious code in reef-whale-dym553-project (npm)
- Aug 14, 2025
Malicious code in reef-wave-ywq516-project (npm)
- Aug 14, 2025
Malicious code in reef-wave-gil278-project (npm)
- Aug 14, 2025
Malicious code in reef-vzxen-tnu34-zenith-project (npm)
- Aug 14, 2025
Malicious code in reef-vulture-squ384-project (npm)
Page 5381 of 6,665