Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in reaact (npm)
- Aug 14, 2025
Malicious code in re4e-zh (npm)
- Aug 14, 2025
Malicious code in rdpfox_clientprocess (npm)
- Aug 14, 2025
Malicious code in rdpfox-onboard-client (npm)
- Aug 14, 2025
Malicious code in rdjava (npm)
- Aug 14, 2025
Malicious code in rdio-js-api (npm)
- Aug 14, 2025
Malicious code in rdhkeqficymozlvt (npm)
- Aug 14, 2025
Malicious code in rdatapkg (npm)
- Aug 14, 2025
Malicious code in rdaport (npm)
- Aug 14, 2025
Malicious code in rcs_ocs (npm)
- Aug 14, 2025
Malicious code in rcppsmc (npm)
- Aug 14, 2025
Malicious code in rckuvwhqzyspijtg (npm)
- Aug 14, 2025
Malicious code in rcenodejs (npm)
- Aug 14, 2025
Malicious code in rca-sign-in (npm)
- Aug 14, 2025
Malicious code in rca-search-filter (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-juno (npm)
- Aug 14, 2025
Malicious code in rca-include (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-filter (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-draggable (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-date-picker (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-compte-comptable (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rca-ajouter-contact (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rc7-legacy (npm)
1 compromised version
- Aug 14, 2025
Malicious code in rbx-parser-ts (npm)
3 compromised versions
- Aug 14, 2025
Malicious code in rbmc.logger (npm)
- Aug 14, 2025
Malicious code in rbers (npm)
- Aug 14, 2025
Malicious code in rb-toolset (npm)
- Aug 14, 2025
Malicious code in rb-domain (npm)
- Aug 14, 2025
Malicious code in rayumanw (npm)
- Aug 14, 2025
Malicious code in raynard (npm)
- Aug 14, 2025
Malicious code in ray-dashboard-client (npm)
- Aug 14, 2025
Malicious code in rawstack (npm)
- Aug 14, 2025
Malicious code in rawrdzsagbkorawrpkwehtvm (npm)
- Aug 14, 2025
Malicious code in rawhide (npm)
- Aug 14, 2025
Malicious code in ravinala (npm)
- Aug 14, 2025
Malicious code in raven_yt4of_czynn_meadow (npm)
- Aug 14, 2025
Malicious code in raven_x3yqc_jpeel_bramble (npm)
- Aug 14, 2025
Malicious code in raven_vghgl_8kt19_lily (npm)
- Aug 14, 2025
Malicious code in raven_pvtai_nf4zh_dew (npm)
- Aug 14, 2025
Malicious code in raven_phgdo_1n9hr_nimbus (npm)
- Aug 14, 2025
Malicious code in raven_owlyr_tcxkj_citadel (npm)
- Aug 14, 2025
Malicious code in raven_lzq8v_g0qdx_crystal (npm)
- Aug 14, 2025
Malicious code in raven_av4co_lfjxp_kaleidoscope (npm)
- Aug 14, 2025
Malicious code in raven_ak4tm_8m44o_sapphire (npm)
- Aug 14, 2025
Malicious code in raven_3yk6i_lzuy9_xylophone (npm)
- Aug 14, 2025
Malicious code in raven-xygr4-x7lsc-jasper-project (npm)
- Aug 14, 2025
Malicious code in raven-vjn20-lx1iy-willow-project (npm)
- Aug 14, 2025
Malicious code in raven-sdk (npm)
- Aug 14, 2025
Malicious code in raven-mfq5n-5volt-tempest-project (npm)
- Aug 14, 2025
Malicious code in raven-ipbi4-tujyl-verdant-project (npm)
Page 5786 of 7,293