Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in reacamlotoin (npm)
- Aug 19, 2022
Malicious code in rduxsaga (npm)
- Aug 19, 2022
Malicious code in rdeepgextend (npm)
- Aug 19, 2022
Malicious code in rcutii (npm)
- Aug 19, 2022
Malicious code in rcsolvefrom (npm)
- Aug 19, 2022
Malicious code in rbsove (npm)
- Aug 19, 2022
Malicious code in rbabeaafy (npm)
- Aug 19, 2022
Malicious code in rawoader (npm)
- Aug 19, 2022
Malicious code in rawbdoy (npm)
- Aug 19, 2022
Malicious code in randoxlmstoing (npm)
- Aug 19, 2022
Malicious code in randovbyte (npm)
- Aug 19, 2022
Malicious code in raedpkgup (npm)
- Aug 19, 2022
Malicious code in racvxen (npm)
- Aug 19, 2022
Malicious code in ractnative (npm)
- Aug 19, 2022
Malicious code in quewynstring (npm)
- Aug 19, 2022
Malicious code in qmt (npm)
- Aug 19, 2022
Malicious code in qeralport (npm)
- Aug 19, 2022
Malicious code in pstbssfpresetenv (npm)
- Aug 19, 2022
Malicious code in pslx (npm)
- Aug 19, 2022
Malicious code in psaqko (npm)
- Aug 19, 2022
Malicious code in prtetier (npm)
- Aug 19, 2022
Malicious code in proptyps (npm)
- Aug 19, 2022
Malicious code in promaisepolfill (npm)
- Aug 19, 2022
Malicious code in progressbrwepbackplugin (npm)
- Aug 19, 2022
Malicious code in pretyms (npm)
- Aug 19, 2022
Malicious code in pretyerror (npm)
- Aug 19, 2022
Malicious code in prettyby6es (npm)
- Aug 19, 2022
Malicious code in pottcs (npm)
- Aug 19, 2022
Malicious code in postcsssafeparsear (npm)
- Aug 19, 2022
Malicious code in 8bula (npm)
- Aug 19, 2022
Malicious code in 7np-webpack-pugin (npm)
- Aug 19, 2022
Malicious code in 6ini (npm)
- Aug 19, 2022
Malicious code in 5string (npm)
- Aug 19, 2022
Malicious code in 3exprem (npm)
- Aug 19, 2022
Malicious code in 2jasmie (npm)
- Aug 19, 2022
Malicious code in asfsertx-plus (npm)
- Aug 19, 2022
Malicious code in apth-exists (npm)
- Aug 19, 2022
Malicious code in apollxo-clfient (npm)
- Aug 19, 2022
Malicious code in apa-root-pzatj (npm)
- Aug 19, 2022
Malicious code in aocrn (npm)
- Aug 19, 2022
Malware in reactrdeux
1 compromised version
- Aug 19, 2022
Malware in 3exprem
1 compromised version
- Aug 19, 2022
Malware in prtetier
1 compromised version
- Aug 19, 2022
Malware in apollxo-clfient
1 compromised version
- Aug 19, 2022
Malware in reactdncdhtml5backend
1 compromised version
- Aug 19, 2022
Malware in 5string
1 compromised version
- Aug 19, 2022
Malware in postcsssafeparsear
1 compromised version
- Aug 19, 2022
Malware in rduxsaga
1 compromised version
- Aug 19, 2022
Malware in 6ini
1 compromised version
- Aug 19, 2022
Malware in reacapppolyfill
1 compromised version
Page 7031 of 7,293