Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in recrut (npm)
- Aug 14, 2025
Malicious code in recriut (npm)
- Aug 14, 2025
Malicious code in record_query (npm)
- Aug 14, 2025
Malicious code in reconcast (npm)
- Aug 14, 2025
Malicious code in recojets (npm)
- Aug 14, 2025
Malicious code in recital (npm)
- Aug 14, 2025
Malicious code in recipe-archive (npm)
- Aug 14, 2025
Malicious code in recipants (npm)
- Aug 14, 2025
Malicious code in recents (npm)
- Aug 14, 2025
Malicious code in rebloc (npm)
- Aug 14, 2025
Malicious code in rebelspy (npm)
- Aug 14, 2025
Malicious code in reatc-native-components (npm)
- Aug 14, 2025
Malicious code in reatc (npm)
- Aug 14, 2025
Malicious code in reat (npm)
- Aug 14, 2025
Malicious code in realtimequeryserv (npm)
- Aug 14, 2025
Malicious code in realtimecat (npm)
- Aug 14, 2025
Malicious code in realmtodo (npm)
- Aug 14, 2025
Malicious code in realmassive-styled-theme (npm)
- Aug 14, 2025
Malicious code in realm_ssp9i_vlipj_nebula (npm)
- Aug 14, 2025
Malicious code in realm_mjcvi_m87ia_opal (npm)
- Aug 14, 2025
Malicious code in realm_blkb6_7tp1z_fern (npm)
- Aug 14, 2025
Malicious code in realm_0m5jn_5v6oj_banyan (npm)
- Aug 14, 2025
Malicious code in realkd (npm)
- Aug 14, 2025
Malicious code in realise (npm)
- Aug 14, 2025
Malicious code in real_sub (npm)
- Aug 14, 2025
Malicious code in real2 (npm)
- Aug 14, 2025
Malicious code in readme-utils (npm)
- Aug 14, 2025
Malicious code in readbook (npm)
- Aug 14, 2025
Malicious code in readable-protractor-standard-postcss-loader (npm)
- Aug 14, 2025
Malicious code in readable-karma-elektra-norma (npm)
- Aug 14, 2025
Malicious code in readable-geodynamo-quasarjet-brane (npm)
- Aug 14, 2025
Malicious code in read-cli-input (npm)
- Aug 14, 2025
Malicious code in reactyiqi-shejimoshi-zuijia-shijian (npm)
- Aug 14, 2025
Malicious code in reactyiliu-moju (npm)
- Aug 14, 2025
Malicious code in reactyiliu-jichuzhishi (npm)
- Aug 14, 2025
Malicious code in reactsy (npm)
- Aug 14, 2025
Malicious code in reactmsagl (npm)
- Aug 14, 2025
Malicious code in reactive-root (npm)
- Aug 14, 2025
Malicious code in reacthunter (npm)
- Aug 14, 2025
Malicious code in reactcodepad (npm)
- Aug 14, 2025
Malicious code in reactatouille-boilerplate (npm)
- Aug 14, 2025
Malicious code in react_vs_ng (npm)
- Aug 14, 2025
Malicious code in react-y-typeahead (npm)
- Aug 14, 2025
Malicious code in react-y-pills (npm)
- Aug 14, 2025
Malicious code in react-wt-jquery-and-css (npm)
- Aug 14, 2025
Malicious code in react-weapp (npm)
- Aug 14, 2025
Malicious code in react-vis-showcase (npm)
- Aug 14, 2025
Malicious code in react-ui-bootstrap (npm)
- Aug 14, 2025
Malicious code in react-typexs (npm)
1 compromised version
- Aug 14, 2025
Malicious code in react-typex (npm)
1 compromised version
Page 5783 of 7,293