Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in trimurti-components (npm)
- Aug 14, 2025
Malicious code in trimntim (npm)
- Aug 14, 2025
Malicious code in trimglede (npm)
- Aug 14, 2025
Malicious code in trill_vd8mj_nb12g_vantage (npm)
- Aug 14, 2025
Malicious code in trill_qjh5p_mpkhe_fountain (npm)
- Aug 14, 2025
Malicious code in trill_odmhp_uteo6_lily (npm)
- Aug 14, 2025
Malicious code in trill_lkvbo_eayf3_ocean (npm)
- Aug 14, 2025
Malicious code in trill-velvet-lbp076-project (npm)
- Aug 14, 2025
Malicious code in trilit (npm)
- Aug 14, 2025
Malicious code in triley (npm)
- Aug 14, 2025
Malicious code in trijinx (npm)
- Aug 14, 2025
Malicious code in trigwars (npm)
- Aug 14, 2025
Malicious code in triggerator-backend (npm)
- Aug 14, 2025
Malicious code in tridef (npm)
- Aug 14, 2025
Malicious code in trhiolabs (npm)
- Aug 14, 2025
Malicious code in trezor-link-node-hid (npm)
- Aug 14, 2025
Malicious code in trezor-link-chrome-udp (npm)
- Aug 14, 2025
Malicious code in trezor-link-chrome-hid (npm)
- Aug 14, 2025
Malicious code in trezor-link-chrome-extension (npm)
- Aug 14, 2025
Malicious code in trezor-link-bridge (npm)
- Aug 14, 2025
Malicious code in trezor-flags (npm)
- Aug 14, 2025
Malicious code in trexxx (npm)
- Aug 14, 2025
Malicious code in tresgar (npm)
- Aug 14, 2025
Malicious code in trendrr (npm)
- Aug 14, 2025
Malicious code in trellotoc (npm)
- Aug 14, 2025
Malicious code in trello.cards (npm)
- Aug 14, 2025
Malicious code in trello-power-up-tutorial-part-one (npm)
- Aug 14, 2025
Malicious code in treehouse-icons (npm)
- Aug 14, 2025
Malicious code in treehouse-downloader (npm)
- Aug 14, 2025
Malicious code in treehands (npm)
- Aug 14, 2025
Malicious code in treeblog (npm)
- Aug 14, 2025
Malicious code in tree-nu-throw-kappa-warn (npm)
- Aug 14, 2025
Malicious code in trebucms (npm)
- Aug 14, 2025
Malicious code in treasure-yarn-wea438-project (npm)
- Aug 14, 2025
Malicious code in trcfaucet (npm)
- Aug 14, 2025
Malicious code in trbplsgxwdekmhzc (npm)
- Aug 14, 2025
Malicious code in trbible (npm)
- Aug 14, 2025
Malicious code in travelman (npm)
- Aug 14, 2025
Malicious code in travalho (npm)
- Aug 14, 2025
Malicious code in trasform (npm)
- Aug 14, 2025
Malicious code in trapez (npm)
- Aug 14, 2025
Malicious code in transproc (npm)
- Aug 14, 2025
Malicious code in transport-neptune-neptune-luminescence (npm)
- Aug 14, 2025
Malicious code in transport-hermes-biomimicry-webdriver-manager (npm)
- Aug 14, 2025
Malicious code in transport-cluster-grunt-phoenix (npm)
- Aug 14, 2025
Malicious code in transport-antimatter-configstore-transhumanism (npm)
- Aug 14, 2025
Malicious code in transleet (npm)
- Aug 14, 2025
Malicious code in translations-kiwi (npm)
- Aug 14, 2025
Malicious code in translation_locale_yml_updater (npm)
- Aug 14, 2025
Malicious code in transhumanism-pyxis-astroinformatics-charon (npm)
Page 5677 of 7,293