Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-BebasNeue (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Astloch (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-Asap (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-AnonymousPro (npm)
- Aug 14, 2025
Malicious code in typopro-web-TypoPRO-AmaticSC (npm)
- Aug 14, 2025
Malicious code in typollab (npm)
- Aug 14, 2025
Malicious code in typohero (npm)
- Aug 14, 2025
Malicious code in typlesmod (npm)
- Aug 14, 2025
Malicious code in typetoken (npm)
- Aug 14, 2025
Malicious code in typescript2-angular-kaifa (npm)
- Aug 14, 2025
Malicious code in typescript-airbnb-prettier-svelte (npm)
1 compromised version
- Aug 14, 2025
Malicious code in typescript-airbnb-prettier (npm)
1 compromised version
- Aug 14, 2025
Malicious code in types-ebay (npm)
- Aug 14, 2025
Malicious code in typeorm-subscription-biohacking-phenomic (npm)
- Aug 14, 2025
Malicious code in typeorm-outercore-xml-axios (npm)
- Aug 14, 2025
Malicious code in typeorm-neptunology-await-biohacking (npm)
- Aug 14, 2025
Malicious code in typeorm-ichnology-nightmare-repository (npm)
- Aug 14, 2025
Malicious code in typeface-m-plus-1p (npm)
- Aug 14, 2025
Malicious code in typed_parameters (npm)
- Aug 14, 2025
Malicious code in typecript (npm)
- Aug 14, 2025
Malicious code in typecreep (npm)
- Aug 14, 2025
Malicious code in tyker (npm)
- Aug 14, 2025
Malicious code in tyhauekbxfvcwsmo (npm)
- Aug 14, 2025
Malicious code in tygjtest (npm)
- Aug 14, 2025
Malicious code in txtdb (npm)
- Aug 14, 2025
Malicious code in txrxhx (npm)
- Aug 14, 2025
Malicious code in txraft (npm)
- Aug 14, 2025
Malicious code in txqajubhszprkemw (npm)
- Aug 14, 2025
Malicious code in txpong (npm)
- Aug 14, 2025
Malicious code in txihwjbuzncsderq (npm)
- Aug 14, 2025
Malicious code in txcobiuzdjmnelhq (npm)
- Aug 14, 2025
Malicious code in twu-registered-users-data-service (npm)
- Aug 14, 2025
Malicious code in twtimage (npm)
- Aug 14, 2025
Malicious code in twofloats (npm)
- Aug 14, 2025
Malicious code in twocam (npm)
- Aug 14, 2025
Malicious code in twitrans (npm)
- Aug 14, 2025
Malicious code in twitch-styles (npm)
- Aug 14, 2025
Malicious code in twitch-smartling-sdk (npm)
- Aug 14, 2025
Malicious code in twitch-i18n-utils (npm)
- Aug 14, 2025
Malicious code in twitch-grunt-smartling-sdk (npm)
- Aug 14, 2025
Malicious code in twinkle-cascade-sqe614-project (npm)
- Aug 14, 2025
Malicious code in twinkle-abide-fit011-project (npm)
- Aug 14, 2025
Malicious code in twine-to-yoto (npm)
- Aug 14, 2025
Malicious code in twine-rails (npm)
- Aug 14, 2025
Malicious code in twinbox (npm)
- Aug 14, 2025
Malicious code in twilio-npm (npm)
- Aug 14, 2025
Malicious code in twilio-gladia-ws (npm)
- Aug 14, 2025
Malicious code in twilio-datasync (npm)
- Aug 14, 2025
Malicious code in twilight_w5aga_yy0z5_utopia (npm)
- Aug 14, 2025
Malicious code in twilight_pn38n_vmpz5_xenon (npm)
Page 5709 of 7,329