Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in taurus-lyra-frontend-transform (npm)
- Aug 14, 2025
Malicious code in taurus-lacerta-cosmiconfig-futurology (npm)
- Aug 14, 2025
Malicious code in taurus-dotenv-safe-bionics-hugo (npm)
- Aug 14, 2025
Malicious code in taurus-ceres-configstore-pavo (npm)
- Aug 14, 2025
Malicious code in tau-encode-web-sed-small (npm)
- Aug 14, 2025
Malicious code in tatwebui (npm)
- Aug 14, 2025
Malicious code in tastegarden2025 (npm)
- Aug 14, 2025
Malicious code in tastegarden (npm)
- Aug 14, 2025
Malicious code in taskjar (npm)
- Aug 14, 2025
Malicious code in taskboard-form-builder (npm)
- Aug 14, 2025
Malicious code in taskboard-builder (npm)
- Aug 14, 2025
Malicious code in tashboard (npm)
- Aug 14, 2025
Malicious code in tarreusm (npm)
- Aug 14, 2025
Malicious code in tarisome (npm)
- Aug 14, 2025
Malicious code in tarhistory (npm)
- Aug 14, 2025
Malicious code in tardigrade-sagitta-asteroid-singularity (npm)
- Aug 14, 2025
Malicious code in tardigrade-public-rehype-uninstall (npm)
- Aug 14, 2025
Malicious code in tardigrade-native-testcafe-dynamo (npm)
- Aug 14, 2025
Malicious code in tardigrade-kardashevscale-miranda-grus (npm)
- Aug 14, 2025
Malicious code in tardigrade-epimetheus-parsec-resonance (npm)
- Aug 14, 2025
Malicious code in tardigrade-changelog-lint-taurus (npm)
- Aug 14, 2025
Malicious code in tarbackup (npm)
- Aug 14, 2025
Malicious code in taraji (npm)
- Aug 14, 2025
Malicious code in taptodo (npm)
- Aug 14, 2025
Malicious code in tapkin (npm)
- Aug 14, 2025
Malicious code in tapioca-frontend-apps (npm)
- Aug 14, 2025
Malicious code in taphonomy-semantic-release-magnetar-stop (npm)
- Aug 14, 2025
Malicious code in taphonomy-pino-adonis-betelgeuse (npm)
- Aug 14, 2025
Malicious code in taphonomy-mongodb-on-element-ui (npm)
- Aug 14, 2025
Malicious code in taphonomy-hercules-weywot-quark (npm)
- Aug 14, 2025
Malicious code in taphonomy-graphql-nodejs-isostasy (npm)
- Aug 14, 2025
Malicious code in taphonomy-exoplanet-geomorphology-gridsome (npm)
- Aug 14, 2025
Malicious code in tapestry.build (npm)
- Aug 14, 2025
Malicious code in taoyige (npm)
- Aug 14, 2025
Malicious code in tantu-fe-m (npm)
- Aug 14, 2025
Malicious code in tanktop (npm)
- Aug 14, 2025
Malicious code in tanker-kit (npm)
- Aug 14, 2025
Malicious code in tanker-fetch (npm)
- Aug 14, 2025
Malicious code in tanjiro-simsimi-teach (npm)
- Aug 14, 2025
Malicious code in tanjiro-ping-bot (npm)
- Aug 14, 2025
Malicious code in tanium-snip (npm)
- Aug 14, 2025
Malicious code in tanium-builder (npm)
- Aug 14, 2025
Malicious code in tania-telur100-breki (npm)
- Aug 14, 2025
Malicious code in tania-tahutek74-sukiwir (npm)
- Aug 14, 2025
Malicious code in tania-ruwet16-kuki (npm)
- Aug 14, 2025
Malicious code in tania-rangi84-breki (npm)
- Aug 14, 2025
Malicious code in tania-bakso97-sukiwir (npm)
- Aug 14, 2025
Malicious code in tango-ylo-project (npm)
- Aug 14, 2025
Malicious code in tango-yankee-alpha-vhkfd (npm)
- Aug 14, 2025
Malicious code in tango-xzy-project (npm)
Page 5331 of 6,665