Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in reacta-ollo (npm)
- Aug 19, 2022
Malicious code in react-nati0e-vecor-icons (npm)
- Aug 19, 2022
Malicious code in react-erro-roevrlay (npm)
- Aug 19, 2022
Malicious code in react-cionx (npm)
- Aug 19, 2022
Malicious code in react-addons-csgtransition-group (npm)
- Aug 19, 2022
Malicious code in reac6-hintl (npm)
- Aug 19, 2022
Malicious code in rdis (npm)
- Aug 19, 2022
Malicious code in randombytse (npm)
- Aug 19, 2022
Malicious code in r2estkler (npm)
- Aug 19, 2022
Malicious code in r2act (npm)
- Aug 19, 2022
Malicious code in qtt (npm)
- Aug 19, 2022
Malicious code in qrecats (npm)
- Aug 19, 2022
Malicious code in qngular-animane (npm)
- Aug 19, 2022
Malicious code in qlux (npm)
- Aug 19, 2022
Malicious code in pth-isabsolute (npm)
- Aug 19, 2022
Malicious code in prsotobufs (npm)
- Aug 19, 2022
Malicious code in progressbr-webpack-plugin (npm)
- Aug 19, 2022
Malicious code in prmytrs (npm)
- Aug 19, 2022
Malware in qtt
1 compromised version
- Aug 19, 2022
Malware in rebact-eror-oveflay
1 compromised version
- Aug 19, 2022
Malware in pth-isabsolute
1 compromised version
- Aug 19, 2022
Malware in qrecats
1 compromised version
- Aug 19, 2022
Malware in r2estkler
1 compromised version
- Aug 19, 2022
Malware in react-addons-csgtransition-group
1 compromised version
- Aug 19, 2022
Malware in -redux-forjm
1 compromised version
- Aug 19, 2022
Malware in qlux
1 compromised version
- Aug 19, 2022
Malware in rescet
1 compromised version
- Aug 19, 2022
Malware in reqieindex
1 compromised version
- Aug 19, 2022
Malware in reuqireindex
1 compromised version
- Aug 19, 2022
Malware in reac6-hintl
1 compromised version
- Aug 19, 2022
Malware in prmytrs
1 compromised version
- Aug 19, 2022
Malware in rqeue
1 compromised version
- Aug 19, 2022
Malware in retact-vrtualiied
1 compromised version
- Aug 19, 2022
Malware in recat-olor
1 compromised version
- Aug 19, 2022
Malware in readle-stream
1 compromised version
- Aug 19, 2022
Malware in rect-do
1 compromised version
- Aug 19, 2022
Malware in rollup-plugin-lnode-desolve
1 compromised version
- Aug 19, 2022
Malware in progressbr-webpack-plugin
1 compromised version
- Aug 19, 2022
Malware in recsive-read9dir
1 compromised version
- Aug 19, 2022
Malware in prsotobufs
1 compromised version
- Aug 19, 2022
Malware in resize-obsever-pulyfjll
1 compromised version
- Aug 19, 2022
Malware in reax3-pkg-uyp
1 compromised version
- Aug 19, 2022
Malware in rdis
1 compromised version
- Aug 19, 2022
Malware in r2act
1 compromised version
- Aug 19, 2022
Malware in reatstra5p
1 compromised version
- Aug 19, 2022
Malware in reacta-ollo
1 compromised version
- Aug 19, 2022
Malware in readabl-steam
1 compromised version
- Aug 19, 2022
Malware in recas
1 compromised version
- Aug 19, 2022
Malware in ro8edis
1 compromised version
- Aug 19, 2022
Malware in react-cionx
1 compromised version
Page 7020 of 7,293