Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Aug 14, 2025
Malicious code in twilight_nqkgu_poe0p_xenith (npm)
- Aug 14, 2025
Malicious code in twilight-snk5d-1ggxe-jade-project (npm)
- Aug 14, 2025
Malicious code in twilight-rpgqd-r44on-uplift-project (npm)
- Aug 14, 2025
Malicious code in twilight-m2h92-ztsue-jade-project (npm)
- Aug 14, 2025
Malicious code in twilight-k0vo5-y37h3-opal-project (npm)
- Aug 14, 2025
Malicious code in twilight-e1mee-t4co7-dynamo-project (npm)
- Aug 14, 2025
Malicious code in twilight-c4gu4-h7dpa-wind-project (npm)
- Aug 14, 2025
Malicious code in twilight-6eghw-8wjn9-nymph-project (npm)
- Aug 14, 2025
Malicious code in twilight-3rm0i-313hf-whisper-project (npm)
- Aug 14, 2025
Malicious code in twiborg (npm)
- Aug 14, 2025
Malicious code in twhandybiscoqkml (npm)
- Aug 14, 2025
Malicious code in twghkylpuxzioefn (npm)
- Aug 14, 2025
Malicious code in twentyoverten-ui-library (npm)
- Aug 14, 2025
Malicious code in twember (npm)
- Aug 14, 2025
Malicious code in tweetfeed (npm)
- Aug 14, 2025
Malicious code in tweaky (npm)
- Aug 14, 2025
Malicious code in tweakers.net-html-parser (npm)
- Aug 14, 2025
Malicious code in twdfkjbuhsqyvomx (npm)
- Aug 14, 2025
Malicious code in twdakumfbrvesgyp (npm)
- Aug 14, 2025
Malicious code in twawayday (npm)
- Aug 14, 2025
Malicious code in twat (npm)
- Aug 14, 2025
Malicious code in tw-chat-search (npm)
- Aug 14, 2025
Malicious code in tvtccal (npm)
- Aug 14, 2025
Malicious code in tvsysteem (npm)
- Aug 14, 2025
Malicious code in tvshowapp (npm)
- Aug 14, 2025
Malicious code in tvsample (npm)
- Aug 14, 2025
Malicious code in tvquiz (npm)
- Aug 14, 2025
Malicious code in tvirtual (npm)
- Aug 14, 2025
Malicious code in tvaupdoyemkifckw (npm)
- Aug 14, 2025
Malicious code in tv-ny-munich (npm)
- Aug 14, 2025
Malicious code in tuxviewer (npm)
- Aug 14, 2025
Malicious code in tuxonice (npm)
- Aug 14, 2025
Malicious code in tutoroo (npm)
- Aug 14, 2025
Malicious code in tuti-takokak59-sukiwir (npm)
- Aug 14, 2025
Malicious code in tuti-ongol-ongol55-breki (npm)
- Aug 14, 2025
Malicious code in tuti-nasicampur29-kuki (npm)
- Aug 14, 2025
Malicious code in tuti-miebogor65-sukiwir (npm)
- Aug 14, 2025
Malicious code in tuti-mangga8-breki (npm)
- Aug 14, 2025
Malicious code in tuthut (npm)
- Aug 14, 2025
Malicious code in tutest (npm)
- Aug 14, 2025
Malicious code in turtlerob (npm)
- Aug 14, 2025
Malicious code in turtlebot (npm)
- Aug 14, 2025
Malicious code in turones (npm)
- Aug 14, 2025
Malicious code in turnip-snowflake-p9or (npm)
- Aug 14, 2025
Malicious code in turnip-ocean-qpux (npm)
- Aug 14, 2025
Malicious code in turnip-observatory-j27k (npm)
- Aug 14, 2025
Malicious code in turnip-lighthouse-3s9u (npm)
- Aug 14, 2025
Malicious code in turnip-lettuce-mm8i (npm)
- Aug 14, 2025
Malicious code in turnip-lemon-n2jq (npm)
- Aug 14, 2025
Malicious code in turnip-heliosphere-20w5 (npm)
Page 5710 of 7,329