Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Aug 14, 2025
Malicious code in tzf-darwin-x64 (npm)
- Aug 14, 2025
Malicious code in tzeos-sdk (npm)
- Aug 14, 2025
Malicious code in tzdata-finance (npm)
- Aug 14, 2025
Malicious code in tyuxftg (npm)
- Aug 14, 2025
Malicious code in tysctqkgk8yysaoligfkgf4axct7atho (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Yellowtail (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-WeblySleek (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-VeteranTypewriter (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Vegur (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Unifraktur (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-TopSecret (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Slabo (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Signika (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Satisfy (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-SansitaOne (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Rosario (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-PTMono (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Pompiere (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Poetsen (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-PatuaOne (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Pacifico (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Oxygen (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Nickainley (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Montserrat (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Milonga (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-LibreBaskerville (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Lekton (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-LeagueGothic (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Kreon (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-KingthingsPetrock (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Kalam (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Junction (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-IndieFlower (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Inconsolata (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-HHSamuel (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Handlee (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-GreatVibes (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-GrandHotel (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-GiveYouGlory (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Gidole (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Delius (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-DancingScript (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Damion (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Cuprum (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-CraftyGirls (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Coustard (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Cousine (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-ComingSoon (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Chawp (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Bitter (npm)
Page 5708 of 7,329