Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in riana-lumpur95-breki (npm)
- Aug 14, 2025
Malicious code in riana-gandul31-kuki (npm)
- Aug 14, 2025
Malicious code in riadmc (npm)
- Aug 14, 2025
Malicious code in rhynpm (npm)
5 compromised versions
- Aug 14, 2025
Malicious code in rhpdlmkazfjkogxc (npm)
- Aug 14, 2025
Malicious code in rhodemap (npm)
- Aug 14, 2025
Malicious code in rho-warn-rain-transpile-optimize (npm)
- Aug 14, 2025
Malicious code in rho-rho-runtime-small-root (npm)
- Aug 14, 2025
Malicious code in rho-private-string-key-mu (npm)
- Aug 14, 2025
Malicious code in rhinode (npm)
- Aug 14, 2025
Malicious code in rhinobot (npm)
- Aug 14, 2025
Malicious code in rgrong (npm)
- Aug 14, 2025
Malicious code in rgqunfxptycklvkz (npm)
- Aug 14, 2025
Malicious code in rgnhbpscqejkltvk (npm)
- Aug 14, 2025
Malicious code in rgbtlc (npm)
- Aug 14, 2025
Malicious code in rgbfade (npm)
- Aug 14, 2025
Malicious code in rg-guide (npm)
- Aug 14, 2025
Malicious code in rfs-styleguide (npm)
- Aug 14, 2025
Malicious code in rfghgfh (npm)
- Aug 14, 2025
Malicious code in rfc-folders (npm)
- Aug 14, 2025
Malicious code in rezmatrix (npm)
- Aug 14, 2025
Malicious code in rezigiusz (npm)
- Aug 14, 2025
Malicious code in rezbaz (npm)
- Aug 14, 2025
Malicious code in rexchan2139_tools (npm)
- Aug 14, 2025
Malicious code in rexalord (npm)
- Aug 14, 2025
Malicious code in rewindbbs (npm)
- Aug 14, 2025
Malicious code in rewadmin (npm)
- Aug 14, 2025
Malicious code in revinux (npm)
- Aug 14, 2025
Malicious code in review-length-stats (npm)
- Aug 14, 2025
Malicious code in reverb-event (npm)
- Aug 14, 2025
Malicious code in revenssis (npm)
- Aug 14, 2025
Malicious code in reveal-md-virtualreality-nodejs-equinox (npm)
- Aug 14, 2025
Malicious code in reveal-md-process-boson-boson (npm)
- Aug 14, 2025
Malicious code in reveal-md-genomics-blackhole-meissa (npm)
- Aug 14, 2025
Malicious code in reuimwubna (npm)
- Aug 14, 2025
Malicious code in reuest (npm)
- Aug 14, 2025
Malicious code in retrato (npm)
- Aug 14, 2025
Malicious code in retinal (npm)
- Aug 14, 2025
Malicious code in retfee3 (npm)
- Aug 14, 2025
Malicious code in retext-shopify (npm)
- Aug 14, 2025
Malicious code in retcodelog (npm)
- Aug 14, 2025
Malicious code in retallick (npm)
- Aug 14, 2025
Malicious code in retailershopperlens (npm)
- Aug 14, 2025
Malicious code in retail-ui-extensions-react (npm)
- Aug 14, 2025
Malicious code in retail-ui-extensions (npm)
- Aug 14, 2025
Malicious code in resumption (npm)
- Aug 14, 2025
Malicious code in resumegae (npm)
- Aug 14, 2025
Malicious code in resume-pad (npm)
- Aug 14, 2025
Malicious code in resttask (npm)
- Aug 14, 2025
Malicious code in restsims (npm)
Page 5777 of 7,293