Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in topaz-orangutan-qfd150-project (npm)
- Aug 14, 2025
Malicious code in topaz-nugget-qjc168-project (npm)
- Aug 14, 2025
Malicious code in topaz-nebula-ksb955-project (npm)
- Aug 14, 2025
Malicious code in topaz-leopard-kdb618-project (npm)
- Aug 14, 2025
Malicious code in topaz-hill-yeo717-project (npm)
- Aug 14, 2025
Malicious code in topaz-hill-jsi445-project (npm)
- Aug 14, 2025
Malicious code in topaz-hedgehog-pew978-project (npm)
- Aug 14, 2025
Malicious code in topaz-glade-gfb040-project (npm)
- Aug 14, 2025
Malicious code in topaz-giraffe-hcd412-project (npm)
- Aug 14, 2025
Malicious code in topaz-elephant-qhp101-project (npm)
- Aug 14, 2025
Malicious code in topaz-delta-rew535-project (npm)
- Aug 14, 2025
Malicious code in topaz-cloud-owz473-project (npm)
- Aug 14, 2025
Malicious code in topaz-aspen-kcg868-project (npm)
- Aug 14, 2025
Malicious code in topaz-acorn-sbr789-project (npm)
- Aug 14, 2025
Malicious code in top4smm (npm)
- Aug 14, 2025
Malicious code in Toolshed-Client (npm)
- Aug 14, 2025
Malicious code in tools-bridge (npm)
- Aug 14, 2025
Malicious code in toolkdvv (npm)
3 compromised versions
- Aug 14, 2025
Malicious code in toolheads (npm)
- Aug 14, 2025
Malicious code in toolcards (npm)
- Aug 14, 2025
Malicious code in toolbox-pharma (npm)
- Aug 14, 2025
Malicious code in toolapps (npm)
- Aug 14, 2025
Malicious code in tool-lepton-telesto-webpack (npm)
- Aug 14, 2025
Malicious code in tool-koa-technocracy-ariel (npm)
- Aug 14, 2025
Malicious code in tool-dorado-framework-vuetify (npm)
- Aug 14, 2025
Malicious code in tool-command-version-chariklo (npm)
- Aug 14, 2025
Malicious code in tool-chalk-quasarjet-spectroscopy (npm)
- Aug 14, 2025
Malicious code in tool-arcturus-luna-proxima (npm)
- Aug 14, 2025
Malicious code in tool-aquarius-terser-webpack-plugin-jekyll (npm)
- Aug 14, 2025
Malicious code in tonypia (npm)
- Aug 14, 2025
Malicious code in tongxue (npm)
- Aug 14, 2025
Malicious code in tonegen (npm)
- Aug 14, 2025
Malicious code in tomomatch (npm)
- Aug 14, 2025
Malicious code in tommyc (npm)
- Aug 14, 2025
Malicious code in toml-private-cosmos-entanglement (npm)
- Aug 14, 2025
Malicious code in toml-karma-nodejs-rocket (npm)
- Aug 14, 2025
Malicious code in tomi-tempe82-sukiwir (npm)
- Aug 14, 2025
Malicious code in tomi-sego46-breki (npm)
- Aug 14, 2025
Malicious code in tomi-sambel98-sukiwir (npm)
- Aug 14, 2025
Malicious code in tomi-mangga53-breki (npm)
- Aug 14, 2025
Malicious code in tomi-lutis4-breki (npm)
- Aug 14, 2025
Malicious code in tomi-kupat91-kuki (npm)
- Aug 14, 2025
Malicious code in tomi-kue3-kuki (npm)
- Aug 14, 2025
Malicious code in tomasulos (npm)
- Aug 14, 2025
Malicious code in toluna-frontend-infrastructure (npm)
- Aug 14, 2025
Malicious code in toluna-frontend-components (npm)
- Aug 14, 2025
Malicious code in toloka-templates-server (npm)
- Aug 14, 2025
Malicious code in toloka-templates-kit (npm)
- Aug 14, 2025
Malicious code in tolmarsync (npm)
- Aug 14, 2025
Malicious code in toledo-chess (npm)
Page 5282 of 6,666