Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,050 total · sorted newest first- Aug 14, 2025
Malicious code in thedome (npm)
- Aug 14, 2025
Malicious code in thecup (npm)
- Aug 14, 2025
Malicious code in thecarcentre-carsalessuite (npm)
- Aug 14, 2025
Malicious code in thebobcat (npm)
- Aug 14, 2025
Malicious code in theblog (npm)
- Aug 14, 2025
Malicious code in theadoc (npm)
- Aug 14, 2025
Malicious code in the-pod (npm)
- Aug 14, 2025
Malicious code in the-brink-auth (npm)
- Aug 14, 2025
Malicious code in the-api-cache (npm)
- Aug 14, 2025
Malicious code in thavwuieyxbjdrmc (npm)
- Aug 14, 2025
Malicious code in tharsis (npm)
- Aug 14, 2025
Malicious code in thaishop (npm)
- Aug 14, 2025
Malicious code in tgp-pay (npm)
- Aug 14, 2025
Malicious code in tgam-pattern-library (npm)
- Aug 14, 2025
Malicious code in tfclean (npm)
- Aug 14, 2025
Malicious code in tf_client (npm)
- Aug 14, 2025
Malicious code in tezo-sdk (npm)
- Aug 14, 2025
Malicious code in textworld (npm)
- Aug 14, 2025
Malicious code in textuuid (npm)
- Aug 14, 2025
Malicious code in textflash (npm)
- Aug 14, 2025
Malicious code in textbooks (npm)
- Aug 14, 2025
Malicious code in text-helper (npm)
- Aug 14, 2025
Malicious code in texorator (npm)
- Aug 14, 2025
Malicious code in texmex (npm)
- Aug 14, 2025
Malicious code in texecl (npm)
- Aug 14, 2025
Malicious code in texcore (npm)
- Aug 14, 2025
Malicious code in tetric (npm)
- Aug 14, 2025
Malicious code in tethys-xerxes-exec-geochemistry (npm)
- Aug 14, 2025
Malicious code in tethys-singularitarianism-resolvers-quantum (npm)
- Aug 14, 2025
Malicious code in tethys-pyxis-betelgeuse-fornax (npm)
- Aug 14, 2025
Malicious code in tethys-hugo-dorado-readable (npm)
- Aug 14, 2025
Malicious code in testzerocool2 (npm)
- Aug 14, 2025
Malicious code in testzerocool (npm)
- Aug 14, 2025
Malicious code in testwaseempoi (npm)
- Aug 14, 2025
Malicious code in testuse (npm)
- Aug 14, 2025
Malicious code in testukas (npm)
- Aug 14, 2025
Malicious code in testtest-mbox (npm)
- Aug 14, 2025
Malicious code in testtest--testq (npm)
- Aug 14, 2025
Malicious code in testsys (npm)
- Aug 14, 2025
Malicious code in testsubdashboard (npm)
- Aug 14, 2025
Malicious code in testsssss (npm)
- Aug 14, 2025
Malicious code in testror (npm)
- Aug 14, 2025
Malicious code in testppe (npm)
- Aug 14, 2025
Malicious code in testphp (npm)
- Aug 14, 2025
Malicious code in testmv (npm)
- Aug 14, 2025
Malicious code in testmbox1 (npm)
- Aug 14, 2025
Malicious code in testlight (npm)
- Aug 14, 2025
Malicious code in testli (npm)
- Aug 14, 2025
Malicious code in testkeystore (npm)
- Aug 14, 2025
Malicious code in testjm (npm)
Page 5694 of 7,301