Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in tiendapvp (npm)
- Aug 14, 2025
Malicious code in tide-zephyr-jtg469-project (npm)
- Aug 14, 2025
Malicious code in tide-zenith-azh339-project (npm)
- Aug 14, 2025
Malicious code in tide-xerox-tyl414-project (npm)
- Aug 14, 2025
Malicious code in tide-xenon-ngd617-project (npm)
- Aug 14, 2025
Malicious code in tide-xac1b-b9n1c-glow-project (npm)
- Aug 14, 2025
Malicious code in tide-wbbio-36nk6-raven-project (npm)
- Aug 14, 2025
Malicious code in tide-uranium-uep495-project (npm)
- Aug 14, 2025
Malicious code in tide-uadxu-kt7o9-zenith-project (npm)
- Aug 14, 2025
Malicious code in tide-sw3hm-lyf4r-pinnacle-project (npm)
- Aug 14, 2025
Malicious code in tide-saturn-fzi583-project (npm)
- Aug 14, 2025
Malicious code in tide-quill-odq747-project (npm)
- Aug 14, 2025
Malicious code in tide-pi177-xsnti-kismet-project (npm)
- Aug 14, 2025
Malicious code in tide-peacock-oqf232-project (npm)
- Aug 14, 2025
Malicious code in tide-paradise-xzv241-project (npm)
- Aug 14, 2025
Malicious code in tide-o00nn-9k15i-raven-project (npm)
- Aug 14, 2025
Malicious code in tide-hammock-drr124-project (npm)
- Aug 14, 2025
Malicious code in tide-gorilla-dyv651-project (npm)
- Aug 14, 2025
Malicious code in tide-f9oq1-ougwh-harmony-project (npm)
- Aug 14, 2025
Malicious code in tide-everglow-qbc477-project (npm)
- Aug 14, 2025
Malicious code in tide-everest-qsj060-project (npm)
- Aug 14, 2025
Malicious code in tide-dove-ycs026-project (npm)
- Aug 14, 2025
Malicious code in tide-cliff-vwi431-project (npm)
- Aug 14, 2025
Malicious code in tide-9utan-vmksc-jasmine-project (npm)
- Aug 14, 2025
Malicious code in tidb-dashboard-ui (npm)
- Aug 14, 2025
Malicious code in tidalhifi.js (npm)
- Aug 14, 2025
Malicious code in tictactor (npm)
- Aug 14, 2025
Malicious code in ticktricktrack-stm (npm)
- Aug 14, 2025
Malicious code in tibuild (npm)
- Aug 14, 2025
Malicious code in tiara-wajit66-breki (npm)
- Aug 14, 2025
Malicious code in tiara-serimuka26-breki (npm)
- Aug 14, 2025
Malicious code in tiara-sambel42-kuki (npm)
- Aug 14, 2025
Malicious code in tiara-nasipecel51-sukiwir (npm)
- Aug 14, 2025
Malicious code in tiara-nasi62-breki (npm)
- Aug 14, 2025
Malicious code in tiara-menjes91-kuki (npm)
- Aug 14, 2025
Malicious code in tiara-kupat70-breki (npm)
- Aug 14, 2025
Malicious code in tiara-kue67-kuki (npm)
- Aug 14, 2025
Malicious code in tiara-buburayam88-sukiwir (npm)
- Aug 14, 2025
Malicious code in tiar (npm)
- Aug 14, 2025
Malicious code in tianyuan (npm)
- Aug 14, 2025
Malicious code in tia_cli (npm)
- Aug 14, 2025
Malicious code in tia-tests (npm)
- Aug 14, 2025
Malicious code in thunder_zzkrv_7mehz_verdant (npm)
- Aug 14, 2025
Malicious code in thunder_zr4lw_995ma_yellow (npm)
- Aug 14, 2025
Malicious code in thunder_umpmd_qz0gi_undertow (npm)
- Aug 14, 2025
Malicious code in thunder_safzo_90v7x_universe (npm)
- Aug 14, 2025
Malicious code in thunder_r6v3p_ifj1r_coral (npm)
- Aug 14, 2025
Malicious code in thunder_c7511_mubga_prairie (npm)
- Aug 14, 2025
Malicious code in thunder-yonder-qpj361-project (npm)
- Aug 14, 2025
Malicious code in thunder-xylophone-spo981-project (npm)
Page 5285 of 6,666