Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,212 total in npm · sorted newest first- Aug 14, 2025
Malicious code in rcenodejs (npm)
- Aug 14, 2025
Malicious code in rca-sign-in (npm)
- Aug 14, 2025
Malicious code in rca-search-filter (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-juno (npm)
- Aug 14, 2025
Malicious code in rca-include (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-filter (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-draggable (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-date-picker (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-compte-comptable (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-ajouter-contact (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rc7-legacy (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rbx-parser-ts (npm)
3 compromised versions
- Aug 14, 2025
Malicious code in rbmc.logger (npm)
- Aug 14, 2025
Malicious code in rbers (npm)
- Aug 14, 2025
Malicious code in rb-toolset (npm)
- Aug 14, 2025
Malicious code in rb-domain (npm)
- Aug 14, 2025
Malicious code in rayumanw (npm)
- Aug 14, 2025
Malicious code in raynard (npm)
- Aug 14, 2025
Malicious code in ray-dashboard-client (npm)
- Aug 14, 2025
Malicious code in rawstack (npm)
- Aug 14, 2025
Malicious code in rawrdzsagbkorawrpkwehtvm (npm)
- Aug 14, 2025
Malicious code in rawhide (npm)
- Aug 14, 2025
Malicious code in ravinala (npm)
- Aug 14, 2025
Malicious code in raven_yt4of_czynn_meadow (npm)
- Aug 14, 2025
Malicious code in raven_x3yqc_jpeel_bramble (npm)
- Aug 14, 2025
Malicious code in raven_vghgl_8kt19_lily (npm)
- Aug 14, 2025
Malicious code in raven_pvtai_nf4zh_dew (npm)
- Aug 14, 2025
Malicious code in raven_phgdo_1n9hr_nimbus (npm)
- Aug 14, 2025
Malicious code in raven_owlyr_tcxkj_citadel (npm)
- Aug 14, 2025
Malicious code in raven_lzq8v_g0qdx_crystal (npm)
- Aug 14, 2025
Malicious code in raven_av4co_lfjxp_kaleidoscope (npm)
- Aug 14, 2025
Malicious code in raven_ak4tm_8m44o_sapphire (npm)
- Aug 14, 2025
Malicious code in raven_3yk6i_lzuy9_xylophone (npm)
- Aug 14, 2025
Malicious code in raven-xygr4-x7lsc-jasper-project (npm)
- Aug 14, 2025
Malicious code in raven-vjn20-lx1iy-willow-project (npm)
- Aug 14, 2025
Malicious code in raven-sdk (npm)
- Aug 14, 2025
Malicious code in raven-mfq5n-5volt-tempest-project (npm)
- Aug 14, 2025
Malicious code in raven-ipbi4-tujyl-verdant-project (npm)
- Aug 14, 2025
Malicious code in raven-iiybg-bwsat-opal-project (npm)
- Aug 14, 2025
Malicious code in raven-g0b6x-saj76-blossom-project (npm)
- Aug 14, 2025
Malicious code in raven-1nwxr-mb5o4-pebble-project (npm)
- Aug 14, 2025
Malicious code in ratstim (npm)
- Aug 14, 2025
Malicious code in ratemyprofessorsapi (npm)
- Aug 14, 2025
Malicious code in rate-limiter-saturnology-stratigraphy-colors (npm)
- Aug 14, 2025
Malicious code in rate-limiter-joviology-apex-dotenv-safe (npm)
- Aug 14, 2025
Malicious code in rate-limiter-geochemistry-procyon-gatsby (npm)
- Aug 14, 2025
Malicious code in rate-limiter-biotechnology-puppeteer-hadron (npm)
- Aug 14, 2025
Malicious code in raspivi (npm)
- Aug 14, 2025
Malicious code in raspbmc (npm)
- Aug 14, 2025
Malicious code in raspberry-zucchini-uniform-elmyi (npm)
Page 5387 of 6,665