Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in react-type-toastify (npm)
- Aug 14, 2025
Malicious code in react-type-next (npm)
- Aug 14, 2025
Malicious code in react-tinderable-ws (npm)
- Aug 14, 2025
Malicious code in react-stay-scrolled-examples (npm)
- Aug 14, 2025
Malicious code in react-scripts-cep (npm)
- Aug 14, 2025
Malicious code in react-router2 (npm)
- Aug 14, 2025
Malicious code in react-router-dom-5 (npm)
- Aug 14, 2025
Malicious code in react-reporting-poc (npm)
- Aug 14, 2025
Malicious code in react-radio-group-a11y (npm)
- Aug 14, 2025
Malicious code in react-promethion-eeprom-reader (npm)
- Aug 14, 2025
Malicious code in react-play-action (npm)
- Aug 14, 2025
Malicious code in react-pdd-tips (npm)
- Aug 14, 2025
Malicious code in react-pdd-table (npm)
- Aug 14, 2025
Malicious code in react-pdd-tab (npm)
- Aug 14, 2025
Malicious code in react-pdd-select (npm)
- Aug 14, 2025
Malicious code in react-pdd-pagination (npm)
- Aug 14, 2025
Malicious code in react-pdd-msg (npm)
- Aug 14, 2025
Malicious code in react-pdd-modal (npm)
- Aug 14, 2025
Malicious code in react-pdd-form (npm)
- Aug 14, 2025
Malicious code in react-pdd-dui (npm)
- Aug 14, 2025
Malicious code in react-pdd-confirm (npm)
- Aug 14, 2025
Malicious code in react-pdd-calendar-expand (npm)
- Aug 14, 2025
Malicious code in react-pdd-calendar (npm)
- Aug 14, 2025
Malicious code in react-pdd-base (npm)
- Aug 14, 2025
Malicious code in react-pagifier (npm)
- Aug 14, 2025
Malicious code in react-on-liferay (npm)
- Aug 14, 2025
Malicious code in react-odm (npm)
- Aug 14, 2025
Malicious code in react-natvie-components (npm)
- Aug 14, 2025
Malicious code in react-native-website (npm)
- Aug 14, 2025
Malicious code in react-native-testing-log (npm)
- Aug 14, 2025
Malicious code in react-native-sims (npm)
- Aug 14, 2025
Malicious code in react-native-save-base64-image (npm)
- Aug 14, 2025
Malicious code in react-native-react-native-show-message-extension (npm)
- Aug 14, 2025
Malicious code in react-native-performance-navigation-drawer (npm)
- Aug 14, 2025
Malicious code in react-native-performance-navigation-bottom-tabs (npm)
- Aug 14, 2025
Malicious code in react-native-performance-navigation (npm)
- Aug 14, 2025
Malicious code in react-native-performance-lists-profiler (npm)
- Aug 14, 2025
Malicious code in react-native-pankanis-log (npm)
- Aug 14, 2025
Malicious code in react-native-native-toast-library-2022 (npm)
- Aug 14, 2025
Malicious code in react-native-native-toast (npm)
- Aug 14, 2025
Malicious code in react-native-m49-area-picker-modal (npm)
- Aug 14, 2025
Malicious code in react-native-lip-sdk (npm)
- Aug 14, 2025
Malicious code in react-native-lib-teste (npm)
- Aug 14, 2025
Malicious code in react-native-ezio-face-id-sdk (npm)
- Aug 14, 2025
Malicious code in react-native-elemets (npm)
- Aug 14, 2025
Malicious code in react-native-elemens (npm)
- Aug 14, 2025
Malicious code in react-native-data-sdk (npm)
- Aug 14, 2025
Malicious code in react-native-comopnents (npm)
- Aug 14, 2025
Malicious code in react-native-cmoponents (npm)
- Aug 14, 2025
Malicious code in react-native-chorus-player (npm)
Page 5784 of 7,293