Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,423 total · sorted newest first- Aug 14, 2025
Malicious code in totododo (npm)
- Aug 14, 2025
Malicious code in toscolino (npm)
- Aug 14, 2025
Malicious code in torturous (npm)
- Aug 14, 2025
Malicious code in torsten (npm)
- Aug 14, 2025
Malicious code in torrinfo (npm)
- Aug 14, 2025
Malicious code in torrentt (npm)
- Aug 14, 2025
Malicious code in torrent-quaver-yxr253-project (npm)
- Aug 14, 2025
Malicious code in torrent-oak-sxs937-project (npm)
- Aug 14, 2025
Malicious code in tornform (npm)
- Aug 14, 2025
Malicious code in tornado-xylophone-svx809-project (npm)
- Aug 14, 2025
Malicious code in tornado-wormhole-qrcx (npm)
- Aug 14, 2025
Malicious code in tornado-uranium-zke269-project (npm)
- Aug 14, 2025
Malicious code in tornado-sierra-anoh (npm)
- Aug 14, 2025
Malicious code in tornado-quartz-olo327-project (npm)
- Aug 14, 2025
Malicious code in tornado-pebble-kmt728-project (npm)
- Aug 14, 2025
Malicious code in tornado-observatory-l8xh (npm)
- Aug 14, 2025
Malicious code in tornado-kiwi-gzs038-project (npm)
- Aug 14, 2025
Malicious code in tornado-island-bvh173-project (npm)
- Aug 14, 2025
Malicious code in tornado-gorilla-uxy824-project (npm)
- Aug 14, 2025
Malicious code in tornado-everest-jku189-project (npm)
- Aug 14, 2025
Malicious code in tornado-dragon-jyk498-project (npm)
- Aug 14, 2025
Malicious code in tornado-butterfly-zfw073-project (npm)
- Aug 14, 2025
Malicious code in tornado-asteroid-n3ot (npm)
- Aug 14, 2025
Malicious code in tornado-acorn-m6fv (npm)
- Aug 14, 2025
Malicious code in toreev (npm)
- Aug 14, 2025
Malicious code in toredis (npm)
- Aug 14, 2025
Malicious code in topshou (npm)
- Aug 14, 2025
Malicious code in topots (npm)
- Aug 14, 2025
Malicious code in topito (npm)
- Aug 14, 2025
Malicious code in topicrush (npm)
- Aug 14, 2025
Malicious code in topheman (npm)
- Aug 14, 2025
Malicious code in topaz_sfexy_svvcc_limestone (npm)
- Aug 14, 2025
Malicious code in topaz_fdj67_b4fdl_isotope (npm)
- Aug 14, 2025
Malicious code in topaz_8r96l_wz7sd_kryptonite (npm)
- Aug 14, 2025
Malicious code in topaz-xerox-nje139-project (npm)
- Aug 14, 2025
Malicious code in topaz-vortex-usk262-project (npm)
- Aug 14, 2025
Malicious code in topaz-vista-kth544-project (npm)
- Aug 14, 2025
Malicious code in topaz-ripple-gfr006-project (npm)
- Aug 14, 2025
Malicious code in topaz-quartz-cvt252-project (npm)
- Aug 14, 2025
Malicious code in topaz-orangutan-qfd150-project (npm)
- Aug 14, 2025
Malicious code in topaz-nugget-qjc168-project (npm)
- Aug 14, 2025
Malicious code in topaz-nebula-ksb955-project (npm)
- Aug 14, 2025
Malicious code in topaz-leopard-kdb618-project (npm)
- Aug 14, 2025
Malicious code in topaz-hill-yeo717-project (npm)
- Aug 14, 2025
Malicious code in topaz-hill-jsi445-project (npm)
- Aug 14, 2025
Malicious code in topaz-hedgehog-pew978-project (npm)
- Aug 14, 2025
Malicious code in topaz-glade-gfb040-project (npm)
- Aug 14, 2025
Malicious code in topaz-giraffe-hcd412-project (npm)
- Aug 14, 2025
Malicious code in topaz-elephant-qhp101-project (npm)
- Aug 14, 2025
Malicious code in topaz-delta-rew535-project (npm)
Page 5715 of 7,329