Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,212 total in npm · sorted newest first- Aug 14, 2025
Malicious code in reatc (npm)
- Aug 14, 2025
Malicious code in reat (npm)
- Aug 14, 2025
Malicious code in realtimequeryserv (npm)
- Aug 14, 2025
Malicious code in realtimecat (npm)
- Aug 14, 2025
Malicious code in realmtodo (npm)
- Aug 14, 2025
Malicious code in realmassive-styled-theme (npm)
- Aug 14, 2025
Malicious code in realm_ssp9i_vlipj_nebula (npm)
- Aug 14, 2025
Malicious code in realm_mjcvi_m87ia_opal (npm)
- Aug 14, 2025
Malicious code in realm_blkb6_7tp1z_fern (npm)
- Aug 14, 2025
Malicious code in realm_0m5jn_5v6oj_banyan (npm)
- Aug 14, 2025
Malicious code in realkd (npm)
- Aug 14, 2025
Malicious code in realise (npm)
- Aug 14, 2025
Malicious code in real_sub (npm)
- Aug 14, 2025
Malicious code in real2 (npm)
- Aug 14, 2025
Malicious code in readme-utils (npm)
- Aug 14, 2025
Malicious code in readbook (npm)
- Aug 14, 2025
Malicious code in readable-protractor-standard-postcss-loader (npm)
- Aug 14, 2025
Malicious code in readable-karma-elektra-norma (npm)
- Aug 14, 2025
Malicious code in readable-geodynamo-quasarjet-brane (npm)
- Aug 14, 2025
Malicious code in read-cli-input (npm)
- Aug 14, 2025
Malicious code in reactyiqi-shejimoshi-zuijia-shijian (npm)
- Aug 14, 2025
Malicious code in reactyiliu-moju (npm)
- Aug 14, 2025
Malicious code in reactyiliu-jichuzhishi (npm)
- Aug 14, 2025
Malicious code in reactsy (npm)
- Aug 14, 2025
Malicious code in reactmsagl (npm)
- Aug 14, 2025
Malicious code in reactive-root (npm)
- Aug 14, 2025
Malicious code in reacthunter (npm)
- Aug 14, 2025
Malicious code in reactcodepad (npm)
- Aug 14, 2025
Malicious code in reactatouille-boilerplate (npm)
- Aug 14, 2025
Malicious code in react_vs_ng (npm)
- Aug 14, 2025
Malicious code in react-y-typeahead (npm)
- Aug 14, 2025
Malicious code in react-y-pills (npm)
- Aug 14, 2025
Malicious code in react-wt-jquery-and-css (npm)
- Aug 14, 2025
Malicious code in react-weapp (npm)
- Aug 14, 2025
Malicious code in react-vis-showcase (npm)
- Aug 14, 2025
Malicious code in react-ui-bootstrap (npm)
- Aug 14, 2025
Malicious code in react-typexs (npm)
1 compromised version
- Aug 14, 2025
Malicious code in react-typex (npm)
1 compromised version
- Aug 14, 2025
Malicious code in react-type-toastify (npm)
- Aug 14, 2025
Malicious code in react-type-next (npm)
- Aug 14, 2025
Malicious code in react-tinderable-ws (npm)
- Aug 14, 2025
Malicious code in react-stay-scrolled-examples (npm)
- Aug 14, 2025
Malicious code in react-scripts-cep (npm)
- Aug 14, 2025
Malicious code in react-router2 (npm)
- Aug 14, 2025
Malicious code in react-router-dom-5 (npm)
- Aug 14, 2025
Malicious code in react-reporting-poc (npm)
- Aug 14, 2025
Malicious code in react-radio-group-a11y (npm)
- Aug 14, 2025
Malicious code in react-promethion-eeprom-reader (npm)
- Aug 14, 2025
Malicious code in react-play-action (npm)
- Aug 14, 2025
Malicious code in react-pdd-tips (npm)
Page 5384 of 6,665