Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,423 total · sorted newest first- Aug 14, 2025
Malicious code in toba-batak-dictionary (npm)
- Aug 14, 2025
Malicious code in toastbox (npm)
- Aug 14, 2025
Malicious code in to32 (npm)
- Aug 14, 2025
Malicious code in to-slug (npm)
- Aug 14, 2025
Malicious code in to-class-name (npm)
- Aug 14, 2025
Malicious code in tnmbwkhxlaucgefk (npm)
- Aug 14, 2025
Malicious code in tnkscruikhmbjgfl (npm)
- Aug 14, 2025
Malicious code in tmw-shell-angular2 (npm)
- Aug 14, 2025
Malicious code in tmsxkrpdqicygjwf (npm)
- Aug 14, 2025
Malicious code in tmswitch (npm)
- Aug 14, 2025
Malicious code in tmp-tmp3 (npm)
- Aug 14, 2025
Malicious code in tmnetwork (npm)
- Aug 14, 2025
Malicious code in tmennywww (npm)
- Aug 14, 2025
Malicious code in tmcvid (npm)
- Aug 14, 2025
Malicious code in tma-serve-mobiledeviceunlock (npm)
- Aug 14, 2025
Malicious code in tma-framework (npm)
- Aug 14, 2025
Malicious code in tlt658 (npm)
- Aug 14, 2025
Malicious code in tlkwebrtc (npm)
- Aug 14, 2025
Malicious code in tleilaxus (npm)
- Aug 14, 2025
Malicious code in tleilaxu (npm)
- Aug 14, 2025
Malicious code in tl-creat (npm)
- Aug 14, 2025
Malicious code in tkbnp4 (npm)
- Aug 14, 2025
Malicious code in tk-engine (npm)
- Aug 14, 2025
Malicious code in tjdft-tabela-dinamica (npm)
- Aug 14, 2025
Malicious code in tjaman (npm)
- Aug 14, 2025
Malicious code in titorob (npm)
- Aug 14, 2025
Malicious code in titletip (npm)
- Aug 14, 2025
Malicious code in titletag (npm)
- Aug 14, 2025
Malicious code in title-from-url (npm)
- Aug 14, 2025
Malicious code in titanpaas (npm)
- Aug 14, 2025
Malicious code in titancna (npm)
- Aug 14, 2025
Malicious code in titan-ugli-2zhw (npm)
- Aug 14, 2025
Malicious code in titan-testcafe-registry-mongodb (npm)
- Aug 14, 2025
Malicious code in titan-steganography-redis-publish (npm)
- Aug 14, 2025
Malicious code in titan-singularitarianism-terser-venus (npm)
- Aug 14, 2025
Malicious code in titan-react-components (npm)
- Aug 14, 2025
Malicious code in titan-quince-idp5 (npm)
- Aug 14, 2025
Malicious code in titan-quasar-8jq8 (npm)
- Aug 14, 2025
Malicious code in titan-pino-pretty-bellatrix-cassini (npm)
- Aug 14, 2025
Malicious code in titan-jetty-osi5 (npm)
- Aug 14, 2025
Malicious code in titan-fig-rooi (npm)
- Aug 14, 2025
Malicious code in titan-concurrently-adonis-leda (npm)
- Aug 14, 2025
Malicious code in tiptoc (npm)
- Aug 14, 2025
Malicious code in tiprash (npm)
- Aug 14, 2025
Malicious code in tipico-live-chat (npm)
- Aug 14, 2025
Malicious code in tipcalcjs (npm)
- Aug 14, 2025
Malicious code in tipbook (npm)
- Aug 14, 2025
Malicious code in tinyurl-class-module (npm)
- Aug 14, 2025
Malicious code in tinyspot (npm)
- Aug 14, 2025
Malicious code in tinyplus2 (npm)
Page 5717 of 7,329