Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in tern-caf (npm)
- Aug 14, 2025
Malicious code in termsat (npm)
- Aug 14, 2025
Malicious code in termonate (npm)
- Aug 14, 2025
Malicious code in terminati (npm)
- Aug 14, 2025
Malicious code in terminalcolor256 (npm)
21 compromised versions
- Aug 14, 2025
Malicious code in termacase (npm)
- Aug 14, 2025
Malicious code in term-paper-warehouse (npm)
- Aug 14, 2025
Malicious code in terereyes (npm)
- Aug 14, 2025
Malicious code in terapeak-subman-new (npm)
- Aug 14, 2025
Malicious code in teptex (npm)
- Aug 14, 2025
Malicious code in teozard (npm)
- Aug 14, 2025
Malicious code in tentcooim (npm)
- Aug 14, 2025
Malicious code in tent-using-western (npm)
- Aug 14, 2025
Malicious code in tensorplow (npm)
- Aug 14, 2025
Malicious code in tenkici (npm)
- Aug 14, 2025
Malicious code in tenibot (npm)
- Aug 14, 2025
Malicious code in tengyiwei (npm)
- Aug 14, 2025
Malicious code in tengoydoy (npm)
- Aug 14, 2025
Malicious code in tenemos (npm)
- Aug 14, 2025
Malicious code in tenduan (npm)
- Aug 14, 2025
Malicious code in tendrill (npm)
- Aug 14, 2025
Malicious code in tencentcloud-cos-sdk-react-native (npm)
- Aug 14, 2025
Malicious code in temporary-seal (npm)
- Aug 14, 2025
Malicious code in tempora.rx (npm)
- Aug 14, 2025
Malicious code in tempora.react (npm)
- Aug 14, 2025
Malicious code in tempora.host (npm)
- Aug 14, 2025
Malicious code in tempora.consumer (npm)
- Aug 14, 2025
Malicious code in tempora (npm)
- Aug 14, 2025
Malicious code in tempnew (npm)
- Aug 14, 2025
Malicious code in templedti (npm)
- Aug 14, 2025
Malicious code in temple-zucchini-05po (npm)
- Aug 14, 2025
Malicious code in temple-pulsar-n9r6 (npm)
- Aug 14, 2025
Malicious code in temple-grape-rm6z (npm)
- Aug 14, 2025
Malicious code in tempgraph (npm)
- Aug 14, 2025
Malicious code in tempest_wfnjg_0y0be_ripple (npm)
- Aug 14, 2025
Malicious code in tempest_thbcj_osuvu_velocity (npm)
- Aug 14, 2025
Malicious code in tempest_o6c6p_it45d_nymph (npm)
- Aug 14, 2025
Malicious code in tempest_k0z9u_vjwa0_dawn (npm)
- Aug 14, 2025
Malicious code in tempest_dsknp_fxvk1_wander (npm)
- Aug 14, 2025
Malicious code in tempest_brueb_svp49_giraffe (npm)
- Aug 14, 2025
Malicious code in tempest_6lvd4_15jqt_noir (npm)
- Aug 14, 2025
Malicious code in tempest-uo69v-qz61a-cascade-project (npm)
- Aug 14, 2025
Malicious code in tempest-dcc0g-betnw-jewel-project (npm)
- Aug 14, 2025
Malicious code in tempest-d2eyb-i60bs-violet-project (npm)
- Aug 14, 2025
Malicious code in tempest-brlwu-9oe26-obsidian-project (npm)
- Aug 14, 2025
Malicious code in tempest-7fck6-1xs7v-cascade-project (npm)
- Aug 14, 2025
Malicious code in tempest-6g81m-mmcv2-tide-project (npm)
- Aug 14, 2025
Malicious code in tempest-3num5-ifpr1-dawn-project (npm)
- Aug 14, 2025
Malicious code in tempest-1is1n-106o0-whisper-project (npm)
- Aug 14, 2025
Malicious code in temawp (npm)
Page 5328 of 6,665