Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in rallyrobo (npm)
- Aug 14, 2025
Malicious code in rallyproj (npm)
- Aug 14, 2025
Malicious code in raleite (npm)
- Aug 14, 2025
Malicious code in rakuza (npm)
- Aug 14, 2025
Malicious code in rajibcse (npm)
- Aug 14, 2025
Malicious code in rajakamil (npm)
- Aug 14, 2025
Malicious code in rajahk (npm)
- Aug 14, 2025
Malicious code in raisin-frontend (npm)
- Aug 14, 2025
Malicious code in raiser (npm)
- Aug 14, 2025
Malicious code in rainstone (npm)
- Aug 14, 2025
Malicious code in rainbow_uf1tj_5s9cj_illusion (npm)
- Aug 14, 2025
Malicious code in rainbow_t79jj_8yyp2_dream (npm)
- Aug 14, 2025
Malicious code in rainbow_hrkgz_zlg1i_tundra (npm)
- Aug 14, 2025
Malicious code in rainbow_gmu7l_0ekri_alchemy (npm)
- Aug 14, 2025
Malicious code in rainbow_bkdq8_ls3e6_island (npm)
- Aug 14, 2025
Malicious code in rainbow_9aha1_vp99e_infinity (npm)
- Aug 14, 2025
Malicious code in rainbow_5r6q4_ysubd_illusion (npm)
- Aug 14, 2025
Malicious code in rainbow-zeppelin-ryi019-project (npm)
- Aug 14, 2025
Malicious code in rainbow-zebra-yxl194-project (npm)
- Aug 14, 2025
Malicious code in rainbow-violet-fmx109-project (npm)
- Aug 14, 2025
Malicious code in rainbow-sdk-web (npm)
- Aug 14, 2025
Malicious code in rainbow-quill-yby216-project (npm)
- Aug 14, 2025
Malicious code in rainbow-peony-wao392-project (npm)
- Aug 14, 2025
Malicious code in rainbow-opal-ovq755-project (npm)
- Aug 14, 2025
Malicious code in rainbow-nebula-yur890-project (npm)
- Aug 14, 2025
Malicious code in rainbow-labyrinth-voo528-project (npm)
- Aug 14, 2025
Malicious code in rainbow-kiwi-pth895-project (npm)
- Aug 14, 2025
Malicious code in rainbow-kite-lum476-project (npm)
- Aug 14, 2025
Malicious code in rainbow-inferno-ld2h (npm)
- Aug 14, 2025
Malicious code in rainbow-fjord-lhc113-project (npm)
- Aug 14, 2025
Malicious code in rainbow-ferry-yz1f (npm)
- Aug 14, 2025
Malicious code in rainbow-dove-uhw346-project (npm)
- Aug 14, 2025
Malicious code in rainbow-bonfire-xre036-project (npm)
- Aug 14, 2025
Malicious code in rainbow-bonfire-gwe591-project (npm)
- Aug 14, 2025
Malicious code in rainbow-amber-txc869-project (npm)
- Aug 14, 2025
Malicious code in rainbow-acorn-cwg103-project (npm)
- Aug 14, 2025
Malicious code in rain-scale-xi-hash-sed (npm)
- Aug 14, 2025
Malicious code in rain-load-cloud-balance-runtime (npm)
- Aug 14, 2025
Malicious code in railztart (npm)
- Aug 14, 2025
Malicious code in railstank (npm)
- Aug 14, 2025
Malicious code in railsnew (npm)
- Aug 14, 2025
Malicious code in railshock (npm)
- Aug 14, 2025
Malicious code in railsercn (npm)
- Aug 14, 2025
Malicious code in railsday (npm)
- Aug 14, 2025
Malicious code in rails_parallel (npm)
- Aug 14, 2025
Malicious code in rails_fast_attributes (npm)
- Aug 14, 2025
Malicious code in rails-bigint-primarykey (npm)
- Aug 14, 2025
Malicious code in railinfo (npm)
- Aug 14, 2025
Malicious code in raidbot (npm)
- Aug 14, 2025
Malicious code in raid-shadow-legends-promo-codes286 (npm)
Page 5789 of 7,293