Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in titan-jetty-osi5 (npm)
- Aug 14, 2025
Malicious code in titan-fig-rooi (npm)
- Aug 14, 2025
Malicious code in titan-concurrently-adonis-leda (npm)
- Aug 14, 2025
Malicious code in tiptoc (npm)
- Aug 14, 2025
Malicious code in tiprash (npm)
- Aug 14, 2025
Malicious code in tipico-live-chat (npm)
- Aug 14, 2025
Malicious code in tipcalcjs (npm)
- Aug 14, 2025
Malicious code in tipbook (npm)
- Aug 14, 2025
Malicious code in tinyurl-class-module (npm)
- Aug 14, 2025
Malicious code in tinyspot (npm)
- Aug 14, 2025
Malicious code in tinyplus2 (npm)
- Aug 14, 2025
Malicious code in tinydial (npm)
- Aug 14, 2025
Malicious code in tinycnc (npm)
- Aug 14, 2025
Malicious code in tiny-png (npm)
- Aug 14, 2025
Malicious code in tiny-jpg (npm)
- Aug 14, 2025
Malicious code in tinnfo (npm)
- Aug 14, 2025
Malicious code in tinkers (npm)
- Aug 14, 2025
Malicious code in tindev (npm)
- Aug 14, 2025
Malicious code in timsapp (npm)
- Aug 14, 2025
Malicious code in timmapps (npm)
- Aug 14, 2025
Malicious code in timetick (npm)
- Aug 14, 2025
Malicious code in timerfun (npm)
- Aug 14, 2025
Malicious code in timenesia (npm)
- Aug 14, 2025
Malicious code in timegrab (npm)
- Aug 14, 2025
Malicious code in timedate (npm)
- Aug 14, 2025
Malicious code in timebug (npm)
- Aug 14, 2025
Malicious code in timeball (npm)
- Aug 14, 2025
Malicious code in timber-ui (npm)
- Aug 14, 2025
Malicious code in timber-js (npm)
- Aug 14, 2025
Malicious code in timber-fn (npm)
- Aug 14, 2025
Malicious code in timber-console (npm)
- Aug 14, 2025
Malicious code in tiltco (npm)
- Aug 14, 2025
Malicious code in tilizer (npm)
- Aug 14, 2025
Malicious code in tiktokdl-api (npm)
- Aug 14, 2025
Malicious code in tikitank (npm)
- Aug 14, 2025
Malicious code in tiketu (npm)
- Aug 14, 2025
Malicious code in tightwad (npm)
- Aug 14, 2025
Malicious code in tiger-xerox-zyd844-project (npm)
- Aug 14, 2025
Malicious code in tiger-whale-wqe323-project (npm)
- Aug 14, 2025
Malicious code in tiger-reef-nor282-project (npm)
- Aug 14, 2025
Malicious code in tiger-quill-com417-project (npm)
- Aug 14, 2025
Malicious code in tiger-quartz-fbg929-project (npm)
- Aug 14, 2025
Malicious code in tiger-nugget-eit827-project (npm)
- Aug 14, 2025
Malicious code in tiger-lava-znd582-project (npm)
- Aug 14, 2025
Malicious code in tiger-glacier-wkp339-project (npm)
- Aug 14, 2025
Malicious code in tiger-dewdrop-efr734-project (npm)
- Aug 14, 2025
Malicious code in tiger-daytrend (npm)
- Aug 14, 2025
Malicious code in tiger-amber-ayt304-project (npm)
- Aug 14, 2025
Malicious code in tifeedly (npm)
- Aug 14, 2025
Malicious code in tieude (npm)
Page 5284 of 6,666