Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,266 total in npm · sorted newest first- Jun 25, 2024
Malicious code in tetusdgsudgs (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in testttttttttttttttttaz (npm)
1 compromised version
- Jun 25, 2024
Malicious code in testrce (npm)
1 compromised version
- Jun 25, 2024
Malicious code in testing-utils1 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tester-npm-com-test (npm)
1 compromised version
- Jun 25, 2024
Malicious code in testenbdbank (npm)
1 compromised version
- Jun 25, 2024
Malicious code in test_priv_pkg (npm)
1 compromised version
- Jun 25, 2024
Malicious code in test1_lykos (npm)
1 compromised version
- Jun 25, 2024
Malicious code in test-renderer (npm)
1 compromised version
- Jun 25, 2024
Malicious code in test-package101 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in test-nodeconfusion (npm)
1 compromised version
- Jun 25, 2024
Malicious code in test-dependency-confusion-new (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in test-dependency-confusion (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in test-depconf-windows2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in test-depconf-windows (npm)
1 compromised version
- Jun 25, 2024
Malicious code in teslaodometermonitor11 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in teslaodometermonitor (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in tesla-admin-ui (npm)
1 compromised version
- Jun 25, 2024
Malicious code in terraform-config (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tendable (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in tenant.web (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tempomatrce3 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tempomati-omega-69-emcuf8 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tempomati-omega-5-emcuf31 (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in tempomati-omega-5-emcuf2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tempomati-omega-3 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in techtrans (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in techghoshal144 (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in techghoshal123 (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in techghoshal (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tech-vis (npm)
1 compromised version
- Jun 25, 2024
Malicious code in teams-web-part-application (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tealium-ui-kit (npm)
1 compromised version
- Jun 25, 2024
Malicious code in taxes-experience (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in tauri-plugin-sql-api (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tanker-branch (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in systemrobotassistant (npm)
1 compromised version
- Jun 25, 2024
Malicious code in system-info-sender (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in sync-dsc (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in symphony-lib (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in symbl-js (npm)
1 compromised version
- Jun 25, 2024
Malicious code in syfadis.experience (npm)
1 compromised version
- Jun 25, 2024
Malicious code in swisscom-sdx (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sw-i18n (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sw-google-analytics (npm)
1 compromised version
- Jun 25, 2024
Malicious code in svgo-compressor (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in svelte-daily-prebuilt (npm)
1 compromised version
- Jun 25, 2024
Malicious code in suparhit-movie-watching-john-wick-chapter-4-fullmovies-online-at-home01 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in suparhit-movie-watching-john-wick-chapter-4-fullmovies-online-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in sun-flare (npm)
4 compromised versions
Page 6179 of 6,646