Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in soarou0er
1 compromised version
- Aug 19, 2022
Malware in sass-loadre
1 compromised version
- Aug 19, 2022
Malware in se4raverse
1 compromised version
- Aug 19, 2022
Malware in seacpe-string-regexp
1 compromised version
- Aug 19, 2022
Malware in slit-stged
1 compromised version
- Aug 19, 2022
Malware in ruglp
1 compromised version
- Aug 19, 2022
Malware in sh0rtiwd
1 compromised version
- Aug 19, 2022
Malware in semanitco-i-react
1 compromised version
- Aug 19, 2022
Malware in showadlown
1 compromised version
- Aug 19, 2022
Malware in semre
1 compromised version
- Aug 19, 2022
Malware in simplegi
1 compromised version
- Aug 19, 2022
Malware in senbg
1 compromised version
- Aug 19, 2022
Malware in rpety-ms
1 compromised version
- Aug 19, 2022
Malware in seuzelizke
1 compromised version
- Aug 19, 2022
Malware in sass-lwadeoq
1 compromised version
- Aug 19, 2022
Malware in rzedux-thunak
1 compromised version
- Aug 19, 2022
Malware in sanitize-figlgname
1 compromised version
- Aug 19, 2022
Malware in semantic-u-resct
1 compromised version
- Aug 19, 2022
Malware in rx3egexp
1 compromised version
- Aug 19, 2022
Malware in shint
1 compromised version
- Aug 19, 2022
Malware in s3en
1 compromised version
- Aug 19, 2022
Malware in sint-plugin-prkomise
1 compromised version
- Aug 19, 2022
Malicious code in -redux-forjm (npm)
- Aug 19, 2022
Malicious code in rqeue (npm)
- Aug 19, 2022
Malicious code in rollup-pulgin-comsonjs (npm)
- Aug 19, 2022
Malicious code in rollup-pugin-babek (npm)
- Aug 19, 2022
Malicious code in rollup-pluginuls (npm)
- Aug 19, 2022
Malicious code in rollup-plugin-lnode-desolve (npm)
- Aug 19, 2022
Malicious code in ro8edis (npm)
- Aug 19, 2022
Malicious code in rnaftjs (npm)
- Aug 19, 2022
Malicious code in rjammda (npm)
- Aug 19, 2022
Malicious code in reuqireindex (npm)
- Aug 19, 2022
Malicious code in retact-vrtualiied (npm)
- Aug 19, 2022
Malicious code in resize-obsever-pulyfjll (npm)
- Aug 19, 2022
Malicious code in rescet (npm)
- Aug 19, 2022
Malicious code in reqieindex (npm)
- Aug 19, 2022
Malicious code in regeneraor-runteime (npm)
- Aug 19, 2022
Malicious code in redux-cations (npm)
- Aug 19, 2022
Malicious code in rect-do (npm)
- Aug 19, 2022
Malicious code in recsive-read9dir (npm)
- Aug 19, 2022
Malicious code in recat-olor (npm)
- Aug 19, 2022
Malicious code in recas (npm)
- Aug 19, 2022
Malicious code in rec3t-dev-utils (npm)
- Aug 19, 2022
Malicious code in rebact-eror-oveflay (npm)
- Aug 19, 2022
Malicious code in reax3-pkg-uyp (npm)
- Aug 19, 2022
Malicious code in reatstra5p (npm)
- Aug 19, 2022
Malicious code in reamd (npm)
- Aug 19, 2022
Malicious code in readle-stream (npm)
- Aug 19, 2022
Malicious code in readgz-cpkg (npm)
- Aug 19, 2022
Malicious code in readabl-steam (npm)
Page 7019 of 7,293