Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in rycursive-rfaddir (npm)
- Aug 19, 2022
Malicious code in rxzjsy-compat (npm)
- Aug 19, 2022
Malicious code in rx3egexp (npm)
- Aug 19, 2022
Malicious code in rwvoloe (npm)
- Aug 19, 2022
Malicious code in runtlcontribconcat (npm)
- Aug 19, 2022
Malicious code in ruglp (npm)
- Aug 19, 2022
Malicious code in rstify (npm)
- Aug 19, 2022
Malicious code in rsead-pk (npm)
- Aug 19, 2022
Malicious code in rsckjs (npm)
- Aug 19, 2022
Malicious code in rrcputli (npm)
- Aug 19, 2022
Malicious code in rpety-ms (npm)
- Aug 19, 2022
Malicious code in rolup-lugintils (npm)
- Aug 19, 2022
Malware in sfebuffer
1 compromised version
- Aug 19, 2022
Malware in rxzjsy-compat
1 compromised version
- Aug 19, 2022
Malware in runtlcontribconcat
1 compromised version
- Aug 19, 2022
Malware in serh-eindex
1 compromised version
- Aug 19, 2022
Malware in rolup-lugintils
1 compromised version
- Aug 19, 2022
Malware in source-ap-loadper
1 compromised version
- Aug 19, 2022
Malware in sfit
1 compromised version
- Aug 19, 2022
Malware in rsckjs
1 compromised version
- Aug 19, 2022
Malware in slughifvy
1 compromised version
- Aug 19, 2022
Malware in soudl
1 compromised version
- Aug 19, 2022
Malware in rwvoloe
1 compromised version
- Aug 19, 2022
Malware in semvee-index
1 compromised version
- Aug 19, 2022
Malware in rstify
1 compromised version
- Aug 19, 2022
Malware in socket.ioo-cient
1 compromised version
- Aug 19, 2022
Malware in rsead-pk
1 compromised version
- Aug 19, 2022
Malware in sequxeliwz
1 compromised version
- Aug 19, 2022
Malware in rycursive-rfaddir
1 compromised version
- Aug 19, 2022
Malware in saciize-html
1 compromised version
- Aug 19, 2022
Malware in saniibe-filename
1 compromised version
- Aug 19, 2022
Malware in son-stringiy-safe
1 compromised version
- Aug 19, 2022
Malware in rrcputli
1 compromised version
- Aug 19, 2022
Malware in soarou0er
1 compromised version
- Aug 19, 2022
Malware in sass-loadre
1 compromised version
- Aug 19, 2022
Malware in se4raverse
1 compromised version
- Aug 19, 2022
Malware in seacpe-string-regexp
1 compromised version
- Aug 19, 2022
Malware in slit-stged
1 compromised version
- Aug 19, 2022
Malware in ruglp
1 compromised version
- Aug 19, 2022
Malware in sh0rtiwd
1 compromised version
- Aug 19, 2022
Malware in semanitco-i-react
1 compromised version
- Aug 19, 2022
Malware in showadlown
1 compromised version
- Aug 19, 2022
Malware in semre
1 compromised version
- Aug 19, 2022
Malware in simplegi
1 compromised version
- Aug 19, 2022
Malware in senbg
1 compromised version
- Aug 19, 2022
Malware in rpety-ms
1 compromised version
- Aug 19, 2022
Malware in seuzelizke
1 compromised version
- Aug 19, 2022
Malware in sass-lwadeoq
1 compromised version
- Aug 19, 2022
Malware in rzedux-thunak
1 compromised version
- Aug 19, 2022
Malware in sanitize-figlgname
1 compromised version
Page 6360 of 6,634