Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,212 total in npm · sorted newest first- Aug 14, 2025
Malicious code in reef-valley-xht136-project (npm)
- Aug 14, 2025
Malicious code in reef-v0fw7-6emc1-yarn-project (npm)
- Aug 14, 2025
Malicious code in reef-unicorn-taa726-project (npm)
- Aug 14, 2025
Malicious code in reef-tundra-zdp656-project (npm)
- Aug 14, 2025
Malicious code in reef-tide-syc865-project (npm)
- Aug 14, 2025
Malicious code in reef-sunset-ghq980-project (npm)
- Aug 14, 2025
Malicious code in reef-saturn-ftx707-project (npm)
- Aug 14, 2025
Malicious code in reef-rose-wcr652-project (npm)
- Aug 14, 2025
Malicious code in reef-rose-rfe604-project (npm)
- Aug 14, 2025
Malicious code in reef-quasar-nkp387-project (npm)
- Aug 14, 2025
Malicious code in reef-quail-mbm521-project (npm)
- Aug 14, 2025
Malicious code in reef-orangutan-pde586-project (npm)
- Aug 14, 2025
Malicious code in reef-oak-big190-project (npm)
- Aug 14, 2025
Malicious code in reef-nv9mo-lqai4-ice-project (npm)
- Aug 14, 2025
Malicious code in reef-nugget-dst166-project (npm)
- Aug 14, 2025
Malicious code in reef-nebula-wrqj (npm)
- Aug 14, 2025
Malicious code in reef-lettuce-9us1 (npm)
- Aug 14, 2025
Malicious code in reef-larch-wx34 (npm)
- Aug 14, 2025
Malicious code in reef-koala-ecz459-project (npm)
- Aug 14, 2025
Malicious code in reef-jade-iea006-project (npm)
- Aug 14, 2025
Malicious code in reef-icicle-kej358-project (npm)
- Aug 14, 2025
Malicious code in reef-iceberg-amv057-project (npm)
- Aug 14, 2025
Malicious code in reef-gorge-mnw474-project (npm)
- Aug 14, 2025
Malicious code in reef-gorge-ifq121-project (npm)
- Aug 14, 2025
Malicious code in reef-galaxy-b6ie (npm)
- Aug 14, 2025
Malicious code in reef-fhuf4-ppvaa-velvet-project (npm)
- Aug 14, 2025
Malicious code in reef-fern-zmx322-project (npm)
- Aug 14, 2025
Malicious code in reef-falcon-jox044-project (npm)
- Aug 14, 2025
Malicious code in reef-elephant-gcs618-project (npm)
- Aug 14, 2025
Malicious code in reef-desert-gvn283-project (npm)
- Aug 14, 2025
Malicious code in reef-bonfire-ats242-project (npm)
- Aug 14, 2025
Malicious code in reef-blossom-xlq631-project (npm)
- Aug 14, 2025
Malicious code in reef-asteroid-o5mz (npm)
- Aug 14, 2025
Malicious code in reef-ant-jnq160-project (npm)
- Aug 14, 2025
Malicious code in reef-8bsw7-htbz7-nymph-project (npm)
- Aug 14, 2025
Malicious code in reedsws (npm)
- Aug 14, 2025
Malicious code in reeact (npm)
- Aug 14, 2025
Malicious code in redwood-yew-d7xz (npm)
- Aug 14, 2025
Malicious code in redwood-yearling-22ia (npm)
- Aug 14, 2025
Malicious code in redwood-wormhole-kqxq (npm)
- Aug 14, 2025
Malicious code in redwood-umbrella-d7j8 (npm)
- Aug 14, 2025
Malicious code in redwood-lima-5cvm (npm)
- Aug 14, 2025
Malicious code in redux-ui-panels (npm)
- Aug 14, 2025
Malicious code in redux-swarm (npm)
- Aug 14, 2025
Malicious code in redux-starter (npm)
- Aug 14, 2025
Malicious code in redux-saga-validator (npm)
- Aug 14, 2025
Malicious code in redux-res (npm)
- Aug 14, 2025
Malicious code in redux-readable-reducer (npm)
- Aug 14, 2025
Malicious code in redux-ace (npm)
- Aug 14, 2025
Malicious code in redshift-volcano-4ufm (npm)
Page 5382 of 6,665