Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Aug 14, 2025
Malicious code in turnip-golf-6bf6 (npm)
- Aug 14, 2025
Malicious code in turnip-gazebo-mf7i (npm)
- Aug 14, 2025
Malicious code in turkish-synonyms-api (npm)
- Aug 14, 2025
Malicious code in turkish-alphabet (npm)
- Aug 14, 2025
Malicious code in turkhouse (npm)
- Aug 14, 2025
Malicious code in turbograft (npm)
- Aug 14, 2025
Malicious code in tunezer (npm)
- Aug 14, 2025
Malicious code in tundra_yaxop_ayqi2_fern (npm)
- Aug 14, 2025
Malicious code in tundra_o4ivj_a9l66_rainbow (npm)
- Aug 14, 2025
Malicious code in tundra_mnchd_g5766_bramble (npm)
- Aug 14, 2025
Malicious code in tundra_g124a_hswa5_breeze (npm)
- Aug 14, 2025
Malicious code in tundra_6w70g_3eekl_crystal (npm)
- Aug 14, 2025
Malicious code in tundra-zephyr-rmr414-project (npm)
- Aug 14, 2025
Malicious code in tundra-paradise-xij948-project (npm)
- Aug 14, 2025
Malicious code in tundra-lilypad-lpc957-project (npm)
- Aug 14, 2025
Malicious code in tundra-jade-bjf766-project (npm)
- Aug 14, 2025
Malicious code in tundra-hill-dui127-project (npm)
- Aug 14, 2025
Malicious code in tundra-fjord-xqd132-project (npm)
- Aug 14, 2025
Malicious code in tundra-brook-ots726-project (npm)
- Aug 14, 2025
Malicious code in tundra-aspen-fyu459-project (npm)
- Aug 14, 2025
Malicious code in tulip-umbra-hof493-project (npm)
- Aug 14, 2025
Malicious code in tulip-nugget-nyz321-project (npm)
- Aug 14, 2025
Malicious code in tulip-moose-oif529-project (npm)
- Aug 14, 2025
Malicious code in tulip-lilac-hhi568-project (npm)
- Aug 14, 2025
Malicious code in tulip-jasmine-gqb310-project (npm)
- Aug 14, 2025
Malicious code in tulip-honeycomb-vdd669-project (npm)
- Aug 14, 2025
Malicious code in tulip-honey-fyn898-project (npm)
- Aug 14, 2025
Malicious code in tulip-galaxy-yel128-project (npm)
- Aug 14, 2025
Malicious code in tulip-frost-zlc923-project (npm)
- Aug 14, 2025
Malicious code in tulip-ecosystem-qnu680-project (npm)
- Aug 14, 2025
Malicious code in tulip-dune-jri292-project (npm)
- Aug 14, 2025
Malicious code in tulip-cherry-vmx378-project (npm)
- Aug 14, 2025
Malicious code in tulasi (npm)
- Aug 14, 2025
Malicious code in tujie-shuishen-yushuijingling (npm)
- Aug 14, 2025
Malicious code in tujie-google-v8 (npm)
- Aug 14, 2025
Malicious code in tuitty (npm)
- Aug 14, 2025
Malicious code in tuimwubna (npm)
- Aug 14, 2025
Malicious code in tuijian-xitong-sanshiliushi (npm)
- Aug 14, 2025
Malicious code in tuhoegniadksblfw (npm)
- Aug 14, 2025
Malicious code in tuhaoche (npm)
- Aug 14, 2025
Malicious code in tugtog (npm)
- Aug 14, 2025
Malicious code in tuerist (npm)
- Aug 14, 2025
Malicious code in tuckerr (npm)
- Aug 14, 2025
Malicious code in tubeume (npm)
- Aug 14, 2025
Malicious code in ttymidi (npm)
- Aug 14, 2025
Malicious code in ttycmd (npm)
- Aug 14, 2025
Malicious code in tttuangou (npm)
- Aug 14, 2025
Malicious code in ttttttest (npm)
- Aug 14, 2025
Malicious code in tttstats (npm)
- Aug 14, 2025
Malicious code in ttsstt (npm)
Page 5711 of 7,329