Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in ripple-xclia-u8axy-spark-project (npm)
- Aug 14, 2025
Malicious code in ripple-whale-roo897-project (npm)
- Aug 14, 2025
Malicious code in ripple-w2laf-r1w2v-jungle-project (npm)
- Aug 14, 2025
Malicious code in ripple-savanna-mdp191-project (npm)
- Aug 14, 2025
Malicious code in ripple-pebble-ecr284-project (npm)
- Aug 14, 2025
Malicious code in ripple-oyt82-myvl8-moonstone-project (npm)
- Aug 14, 2025
Malicious code in ripple-orangutan-eqe533-project (npm)
- Aug 14, 2025
Malicious code in ripple-nebula-lkr586-project (npm)
- Aug 14, 2025
Malicious code in ripple-kite-rnc131-project (npm)
- Aug 14, 2025
Malicious code in ripple-glide-gkc204-project (npm)
- Aug 14, 2025
Malicious code in ripple-ct2fr-z4jwe-echo-project (npm)
- Aug 14, 2025
Malicious code in ripple-blossom-uxv616-project (npm)
- Aug 14, 2025
Malicious code in ripple-7p2bv-s8wxk-pebble-project (npm)
- Aug 14, 2025
Malicious code in ripple-1dlu7-12q0i-unicorn-project (npm)
- Aug 14, 2025
Malicious code in riotbar-react (npm)
- Aug 14, 2025
Malicious code in rinobot-plugin-interactive-heatmap (npm)
- Aug 14, 2025
Malicious code in rinobot-heatmap (npm)
- Aug 14, 2025
Malicious code in ringfs (npm)
- Aug 14, 2025
Malicious code in ringcentral-web-modules (npm)
- Aug 14, 2025
Malicious code in rinchi (npm)
- Aug 14, 2025
Malicious code in rina-tempe81-breki (npm)
- Aug 14, 2025
Malicious code in rina-tahu10-breki (npm)
- Aug 14, 2025
Malicious code in rina-rujak9-breki (npm)
- Aug 14, 2025
Malicious code in rina-miebogor94-sukiwir (npm)
- Aug 14, 2025
Malicious code in rimraff (npm)
- Aug 14, 2025
Malicious code in rimraf-string-aquarius-query (npm)
- Aug 14, 2025
Malicious code in rimraf-glob (npm)
- Aug 14, 2025
Malicious code in riipen-web (npm)
- Aug 14, 2025
Malicious code in rihcatxnmdzybefk (npm)
- Aug 14, 2025
Malicious code in rigel-subduction-eclipse-nucleosynthesis (npm)
- Aug 14, 2025
Malicious code in rigel-mocha-element-ui-cassini (npm)
- Aug 14, 2025
Malicious code in rifqi-takokak95-kuki (npm)
- Aug 14, 2025
Malicious code in rifqi-soto36-sukiwir (npm)
- Aug 14, 2025
Malicious code in rifqi-peyek62-sukiwir (npm)
- Aug 14, 2025
Malicious code in rifqi-oblok11-sukiwir (npm)
- Aug 14, 2025
Malicious code in rifqi-kue80-sukiwir (npm)
- Aug 14, 2025
Malicious code in rifqi-kemplang52-breki (npm)
- Aug 14, 2025
Malicious code in rifqi-jengkol1-kuki (npm)
- Aug 14, 2025
Malicious code in rifler-lego-i18n-tools (npm)
- Aug 14, 2025
Malicious code in rifleman (npm)
- Aug 14, 2025
Malicious code in ridge-trail-dni560-project (npm)
- Aug 14, 2025
Malicious code in ridesapp (npm)
- Aug 14, 2025
Malicious code in rideapp (npm)
- Aug 14, 2025
Malicious code in richg_module (npm)
- Aug 14, 2025
Malicious code in ricfile (npm)
- Aug 14, 2025
Malicious code in ricecake (npm)
- Aug 14, 2025
Malicious code in ricebox (npm)
- Aug 14, 2025
Malicious code in riana-tomat27-sukiwir (npm)
- Aug 14, 2025
Malicious code in riana-telur52-sukiwir (npm)
- Aug 14, 2025
Malicious code in riana-sate73-sukiwir (npm)
Page 5776 of 7,293