Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in toxiproxy (npm)
- Aug 14, 2025
Malicious code in towelguy (npm)
- Aug 14, 2025
Malicious code in touziriji (npm)
- Aug 14, 2025
Malicious code in toutouda (npm)
- Aug 14, 2025
Malicious code in tourman (npm)
- Aug 14, 2025
Malicious code in tour-gateway (npm)
- Aug 14, 2025
Malicious code in touhoufm (npm)
- Aug 14, 2025
Malicious code in touchpro (npm)
- Aug 14, 2025
Malicious code in touchnuts (npm)
- Aug 14, 2025
Malicious code in touchmaster3000 (npm)
- Aug 14, 2025
Malicious code in touch-move (npm)
- Aug 14, 2025
Malicious code in totododo (npm)
- Aug 14, 2025
Malicious code in toscolino (npm)
- Aug 14, 2025
Malicious code in torturous (npm)
- Aug 14, 2025
Malicious code in torsten (npm)
- Aug 14, 2025
Malicious code in torrinfo (npm)
- Aug 14, 2025
Malicious code in torrentt (npm)
- Aug 14, 2025
Malicious code in torrent-quaver-yxr253-project (npm)
- Aug 14, 2025
Malicious code in torrent-oak-sxs937-project (npm)
- Aug 14, 2025
Malicious code in tornform (npm)
- Aug 14, 2025
Malicious code in tornado-xylophone-svx809-project (npm)
- Aug 14, 2025
Malicious code in tornado-wormhole-qrcx (npm)
- Aug 14, 2025
Malicious code in tornado-uranium-zke269-project (npm)
- Aug 14, 2025
Malicious code in tornado-sierra-anoh (npm)
- Aug 14, 2025
Malicious code in tornado-quartz-olo327-project (npm)
- Aug 14, 2025
Malicious code in tornado-pebble-kmt728-project (npm)
- Aug 14, 2025
Malicious code in tornado-observatory-l8xh (npm)
- Aug 14, 2025
Malicious code in tornado-kiwi-gzs038-project (npm)
- Aug 14, 2025
Malicious code in tornado-island-bvh173-project (npm)
- Aug 14, 2025
Malicious code in tornado-gorilla-uxy824-project (npm)
- Aug 14, 2025
Malicious code in tornado-everest-jku189-project (npm)
- Aug 14, 2025
Malicious code in tornado-dragon-jyk498-project (npm)
- Aug 14, 2025
Malicious code in tornado-butterfly-zfw073-project (npm)
- Aug 14, 2025
Malicious code in tornado-asteroid-n3ot (npm)
- Aug 14, 2025
Malicious code in tornado-acorn-m6fv (npm)
- Aug 14, 2025
Malicious code in toreev (npm)
- Aug 14, 2025
Malicious code in toredis (npm)
- Aug 14, 2025
Malicious code in topshou (npm)
- Aug 14, 2025
Malicious code in topots (npm)
- Aug 14, 2025
Malicious code in topito (npm)
- Aug 14, 2025
Malicious code in topicrush (npm)
- Aug 14, 2025
Malicious code in topheman (npm)
- Aug 14, 2025
Malicious code in topaz_sfexy_svvcc_limestone (npm)
- Aug 14, 2025
Malicious code in topaz_fdj67_b4fdl_isotope (npm)
- Aug 14, 2025
Malicious code in topaz_8r96l_wz7sd_kryptonite (npm)
- Aug 14, 2025
Malicious code in topaz-xerox-nje139-project (npm)
- Aug 14, 2025
Malicious code in topaz-vortex-usk262-project (npm)
- Aug 14, 2025
Malicious code in topaz-vista-kth544-project (npm)
- Aug 14, 2025
Malicious code in topaz-ripple-gfr006-project (npm)
- Aug 14, 2025
Malicious code in topaz-quartz-cvt252-project (npm)
Page 5281 of 6,666