Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in restlist (npm)
- Aug 14, 2025
Malicious code in restiks (npm)
- Aug 14, 2025
Malicious code in restframe (npm)
- Aug 14, 2025
Malicious code in restart-halley-semantic-ui-zooarchaeology (npm)
- Aug 14, 2025
Malicious code in restart-eslint-config-spectron-grunt (npm)
- Aug 14, 2025
Malicious code in restart-avior-pino-xenobiology (npm)
- Aug 14, 2025
Malicious code in rest-cosmos-convict-jupiter (npm)
- Aug 14, 2025
Malicious code in respont (npm)
- Aug 14, 2025
Malicious code in responsive-layout (npm)
- Aug 14, 2025
Malicious code in respite-zinnia-qie409-project (npm)
- Aug 14, 2025
Malicious code in respace-ui-layout (npm)
- Aug 14, 2025
Malicious code in respace-ui-component-picker (npm)
- Aug 14, 2025
Malicious code in respace-theme-dark (npm)
- Aug 14, 2025
Malicious code in respace-preset-nus (npm)
- Aug 14, 2025
Malicious code in respace-core (npm)
- Aug 14, 2025
Malicious code in respace-common (npm)
- Aug 14, 2025
Malicious code in respace-cli (npm)
- Aug 14, 2025
Malicious code in resource-search (npm)
- Aug 14, 2025
Malicious code in resource-deployment (npm)
- Aug 14, 2025
Malicious code in resonance-xenium-mpk484-project (npm)
- Aug 14, 2025
Malicious code in resonance-socketio-pulsar-meteor (npm)
- Aug 14, 2025
Malicious code in resonance-pulse-dpl266-project (npm)
- Aug 14, 2025
Malicious code in resonance-magnetar-browserify-carpo (npm)
- Aug 14, 2025
Malicious code in resolvers-uglify-js-exobiology-subduction (npm)
- Aug 14, 2025
Malicious code in resolvers-pyxis-chakra-ui-scripts (npm)
- Aug 14, 2025
Malicious code in resolvers-prettier-stylelint-quasar-bulma (npm)
- Aug 14, 2025
Malicious code in resolvers-less-loader-fornax-castor (npm)
- Aug 14, 2025
Malicious code in resolvers-gridsome-ini-borealis (npm)
- Aug 14, 2025
Malicious code in resolve-upsilon-integer-resolve-balance (npm)
- Aug 14, 2025
Malicious code in resolve-sandbox-export-daemon-gamma (npm)
- Aug 14, 2025
Malicious code in researcher-frontend-synack (npm)
- Aug 14, 2025
Malicious code in research (npm)
- Aug 14, 2025
Malicious code in rescripts (npm)
- Aug 14, 2025
Malicious code in resaline (npm)
- Aug 14, 2025
Malicious code in rerecipe (npm)
- Aug 14, 2025
Malicious code in reqyests (npm)
- Aug 14, 2025
Malicious code in reqyest (npm)
- Aug 14, 2025
Malicious code in requuest (npm)
- Aug 14, 2025
Malicious code in requst (npm)
- Aug 14, 2025
Malicious code in requset (npm)
- Aug 14, 2025
Malicious code in require-sdk (npm)
- Aug 14, 2025
Malicious code in require-ports (npm)
- Aug 14, 2025
Malicious code in require-port (npm)
- Aug 14, 2025
Malicious code in requetst (npm)
- Aug 14, 2025
Malicious code in requets (npm)
- Aug 14, 2025
Malicious code in requet (npm)
- Aug 14, 2025
Malicious code in requestt (npm)
- Aug 14, 2025
Malicious code in request-technocracy-ceres-biotechnology (npm)
- Aug 14, 2025
Malicious code in request-sentry (npm)
- Aug 14, 2025
Malicious code in request-promis (npm)
Page 5778 of 7,293