Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Aug 14, 2025
Malicious code in trk-logger (npm)
- Aug 14, 2025
Malicious code in tritree (npm)
- Aug 14, 2025
Malicious code in triton-rollup-plugin-cz-conventional-changelog-sqlite (npm)
- Aug 14, 2025
Malicious code in triton-readable-luna-farout (npm)
- Aug 14, 2025
Malicious code in triton-mechatronics-cosmology-epigenetics (npm)
- Aug 14, 2025
Malicious code in triton-grunt-webdriver-manager-impulse (npm)
- Aug 14, 2025
Malicious code in triton-backend-barnard-restart (npm)
- Aug 14, 2025
Malicious code in trisus (npm)
- Aug 14, 2025
Malicious code in trip-to-mars (npm)
- Aug 14, 2025
Malicious code in trinky (npm)
- Aug 14, 2025
Malicious code in tringle (npm)
- Aug 14, 2025
Malicious code in trimurti-components (npm)
- Aug 14, 2025
Malicious code in trimntim (npm)
- Aug 14, 2025
Malicious code in trimglede (npm)
- Aug 14, 2025
Malicious code in trill_vd8mj_nb12g_vantage (npm)
- Aug 14, 2025
Malicious code in trill_qjh5p_mpkhe_fountain (npm)
- Aug 14, 2025
Malicious code in trill_odmhp_uteo6_lily (npm)
- Aug 14, 2025
Malicious code in trill_lkvbo_eayf3_ocean (npm)
- Aug 14, 2025
Malicious code in trill-velvet-lbp076-project (npm)
- Aug 14, 2025
Malicious code in trilit (npm)
- Aug 14, 2025
Malicious code in triley (npm)
- Aug 14, 2025
Malicious code in trijinx (npm)
- Aug 14, 2025
Malicious code in trigwars (npm)
- Aug 14, 2025
Malicious code in triggerator-backend (npm)
- Aug 14, 2025
Malicious code in tridef (npm)
- Aug 14, 2025
Malicious code in trhiolabs (npm)
- Aug 14, 2025
Malicious code in trezor-link-node-hid (npm)
- Aug 14, 2025
Malicious code in trezor-link-chrome-udp (npm)
- Aug 14, 2025
Malicious code in trezor-link-chrome-hid (npm)
- Aug 14, 2025
Malicious code in trezor-link-chrome-extension (npm)
- Aug 14, 2025
Malicious code in trezor-link-bridge (npm)
- Aug 14, 2025
Malicious code in trezor-flags (npm)
- Aug 14, 2025
Malicious code in trexxx (npm)
- Aug 14, 2025
Malicious code in tresgar (npm)
- Aug 14, 2025
Malicious code in trendrr (npm)
- Aug 14, 2025
Malicious code in trellotoc (npm)
- Aug 14, 2025
Malicious code in trello.cards (npm)
- Aug 14, 2025
Malicious code in trello-power-up-tutorial-part-one (npm)
- Aug 14, 2025
Malicious code in treehouse-icons (npm)
- Aug 14, 2025
Malicious code in treehouse-downloader (npm)
- Aug 14, 2025
Malicious code in treehands (npm)
- Aug 14, 2025
Malicious code in treeblog (npm)
- Aug 14, 2025
Malicious code in tree-nu-throw-kappa-warn (npm)
- Aug 14, 2025
Malicious code in trebucms (npm)
- Aug 14, 2025
Malicious code in treasure-yarn-wea438-project (npm)
- Aug 14, 2025
Malicious code in trcfaucet (npm)
- Aug 14, 2025
Malicious code in trbplsgxwdekmhzc (npm)
- Aug 14, 2025
Malicious code in trbible (npm)
- Aug 14, 2025
Malicious code in travelman (npm)
- Aug 14, 2025
Malicious code in travalho (npm)
Page 5713 of 7,329