Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malware in semantic-u-resct
1 compromised version
- Aug 19, 2022
Malware in rx3egexp
1 compromised version
- Aug 19, 2022
Malware in shint
1 compromised version
- Aug 19, 2022
Malware in s3en
1 compromised version
- Aug 19, 2022
Malware in sint-plugin-prkomise
1 compromised version
- Aug 19, 2022
Malicious code in -redux-forjm (npm)
- Aug 19, 2022
Malicious code in rqeue (npm)
- Aug 19, 2022
Malicious code in rollup-pulgin-comsonjs (npm)
- Aug 19, 2022
Malicious code in rollup-pugin-babek (npm)
- Aug 19, 2022
Malicious code in rollup-pluginuls (npm)
- Aug 19, 2022
Malicious code in rollup-plugin-lnode-desolve (npm)
- Aug 19, 2022
Malicious code in ro8edis (npm)
- Aug 19, 2022
Malicious code in rnaftjs (npm)
- Aug 19, 2022
Malicious code in rjammda (npm)
- Aug 19, 2022
Malicious code in reuqireindex (npm)
- Aug 19, 2022
Malicious code in retact-vrtualiied (npm)
- Aug 19, 2022
Malicious code in resize-obsever-pulyfjll (npm)
- Aug 19, 2022
Malicious code in rescet (npm)
- Aug 19, 2022
Malicious code in reqieindex (npm)
- Aug 19, 2022
Malicious code in regeneraor-runteime (npm)
- Aug 19, 2022
Malicious code in redux-cations (npm)
- Aug 19, 2022
Malicious code in rect-do (npm)
- Aug 19, 2022
Malicious code in recsive-read9dir (npm)
- Aug 19, 2022
Malicious code in recat-olor (npm)
- Aug 19, 2022
Malicious code in recas (npm)
- Aug 19, 2022
Malicious code in rec3t-dev-utils (npm)
- Aug 19, 2022
Malicious code in rebact-eror-oveflay (npm)
- Aug 19, 2022
Malicious code in reax3-pkg-uyp (npm)
- Aug 19, 2022
Malicious code in reatstra5p (npm)
- Aug 19, 2022
Malicious code in reamd (npm)
- Aug 19, 2022
Malicious code in readle-stream (npm)
- Aug 19, 2022
Malicious code in readgz-cpkg (npm)
- Aug 19, 2022
Malicious code in readabl-steam (npm)
- Aug 19, 2022
Malicious code in reacta-ollo (npm)
- Aug 19, 2022
Malicious code in react-nati0e-vecor-icons (npm)
- Aug 19, 2022
Malicious code in react-erro-roevrlay (npm)
- Aug 19, 2022
Malicious code in react-cionx (npm)
- Aug 19, 2022
Malicious code in react-addons-csgtransition-group (npm)
- Aug 19, 2022
Malicious code in reac6-hintl (npm)
- Aug 19, 2022
Malicious code in rdis (npm)
- Aug 19, 2022
Malicious code in randombytse (npm)
- Aug 19, 2022
Malicious code in r2estkler (npm)
- Aug 19, 2022
Malicious code in r2act (npm)
- Aug 19, 2022
Malicious code in qtt (npm)
- Aug 19, 2022
Malicious code in qrecats (npm)
- Aug 19, 2022
Malicious code in qngular-animane (npm)
- Aug 19, 2022
Malicious code in qlux (npm)
- Aug 19, 2022
Malicious code in pth-isabsolute (npm)
- Aug 19, 2022
Malicious code in prsotobufs (npm)
- Aug 19, 2022
Malicious code in progressbr-webpack-plugin (npm)
Page 6361 of 6,634