Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in prmytrs (npm)
- Aug 19, 2022
Malware in qtt
1 compromised version
- Aug 19, 2022
Malware in rebact-eror-oveflay
1 compromised version
- Aug 19, 2022
Malware in pth-isabsolute
1 compromised version
- Aug 19, 2022
Malware in qrecats
1 compromised version
- Aug 19, 2022
Malware in r2estkler
1 compromised version
- Aug 19, 2022
Malware in react-addons-csgtransition-group
1 compromised version
- Aug 19, 2022
Malware in -redux-forjm
1 compromised version
- Aug 19, 2022
Malware in qlux
1 compromised version
- Aug 19, 2022
Malware in rescet
1 compromised version
- Aug 19, 2022
Malware in reqieindex
1 compromised version
- Aug 19, 2022
Malware in reuqireindex
1 compromised version
- Aug 19, 2022
Malware in reac6-hintl
1 compromised version
- Aug 19, 2022
Malware in prmytrs
1 compromised version
- Aug 19, 2022
Malware in rqeue
1 compromised version
- Aug 19, 2022
Malware in retact-vrtualiied
1 compromised version
- Aug 19, 2022
Malware in recat-olor
1 compromised version
- Aug 19, 2022
Malware in readle-stream
1 compromised version
- Aug 19, 2022
Malware in rect-do
1 compromised version
- Aug 19, 2022
Malware in rollup-plugin-lnode-desolve
1 compromised version
- Aug 19, 2022
Malware in progressbr-webpack-plugin
1 compromised version
- Aug 19, 2022
Malware in recsive-read9dir
1 compromised version
- Aug 19, 2022
Malware in prsotobufs
1 compromised version
- Aug 19, 2022
Malware in resize-obsever-pulyfjll
1 compromised version
- Aug 19, 2022
Malware in reax3-pkg-uyp
1 compromised version
- Aug 19, 2022
Malware in rdis
1 compromised version
- Aug 19, 2022
Malware in r2act
1 compromised version
- Aug 19, 2022
Malware in reatstra5p
1 compromised version
- Aug 19, 2022
Malware in reacta-ollo
1 compromised version
- Aug 19, 2022
Malware in readabl-steam
1 compromised version
- Aug 19, 2022
Malware in recas
1 compromised version
- Aug 19, 2022
Malware in ro8edis
1 compromised version
- Aug 19, 2022
Malware in react-cionx
1 compromised version
- Aug 19, 2022
Malware in rollup-pugin-babek
1 compromised version
- Aug 19, 2022
Malware in redux-cations
1 compromised version
- Aug 19, 2022
Malware in regeneraor-runteime
1 compromised version
- Aug 19, 2022
Malware in reamd
1 compromised version
- Aug 19, 2022
Malware in rjammda
1 compromised version
- Aug 19, 2022
Malware in rnaftjs
1 compromised version
- Aug 19, 2022
Malware in react-erro-roevrlay
1 compromised version
- Aug 19, 2022
Malware in randombytse
1 compromised version
- Aug 19, 2022
Malware in rollup-pluginuls
1 compromised version
- Aug 19, 2022
Malware in readgz-cpkg
1 compromised version
- Aug 19, 2022
Malware in qngular-animane
1 compromised version
- Aug 19, 2022
Malware in rollup-pulgin-comsonjs
1 compromised version
- Aug 19, 2022
Malware in rec3t-dev-utils
1 compromised version
- Aug 19, 2022
Malware in react-nati0e-vecor-icons
1 compromised version
- Aug 19, 2022
Malicious code in pretiy-ytes (npm)
- Aug 19, 2022
Malicious code in ppp-types (npm)
- Aug 19, 2022
Malicious code in pplitu2 (npm)
Page 6362 of 6,634