Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Aug 14, 2025
Malicious code in tdodin (npm)
- Aug 14, 2025
Malicious code in tddzs1tg206 (npm)
- Aug 14, 2025
Malicious code in tddzs1tg06 (npm)
- Aug 14, 2025
Malicious code in tddzs1tg006 (npm)
- Aug 14, 2025
Malicious code in tddmaven (npm)
- Aug 14, 2025
Malicious code in tddgroovy (npm)
- Aug 14, 2025
Malicious code in tdc-cliftonstevenson (npm)
- Aug 14, 2025
Malicious code in tdalgorez (npm)
- Aug 14, 2025
Malicious code in tczeyvowqmsagink (npm)
- Aug 14, 2025
Malicious code in tcxrkmdbalngqhvs (npm)
- Aug 14, 2025
Malicious code in tcufkboxlwyjsdkv (npm)
- Aug 14, 2025
Malicious code in tctools (npm)
- Aug 14, 2025
Malicious code in tcpdftest (npm)
- Aug 14, 2025
Malicious code in tcl-expect (npm)
- Aug 14, 2025
Malicious code in tchap-id-node (npm)
- Aug 14, 2025
Malicious code in tchaik (npm)
- Aug 14, 2025
Malicious code in tcbcocoa (npm)
- Aug 14, 2025
Malicious code in tbvsukchjiewyznx (npm)
- Aug 14, 2025
Malicious code in tbsphp (npm)
- Aug 14, 2025
Malicious code in tbremoting (npm)
- Aug 14, 2025
Malicious code in tbkgzmwqjfnpekoi (npm)
- Aug 14, 2025
Malicious code in tbb-v2 (npm)
- Aug 14, 2025
Malicious code in tb-upload (npm)
- Aug 14, 2025
Malicious code in tazparser (npm)
- Aug 14, 2025
Malicious code in taxopress (npm)
- Aug 14, 2025
Malicious code in taxliendb (npm)
- Aug 14, 2025
Malicious code in taxjar-developers (npm)
- Aug 14, 2025
Malicious code in taxi-typings (npm)
- Aug 14, 2025
Malicious code in taxfix-required-documents (npm)
- Aug 14, 2025
Malicious code in tavserver (npm)
- Aug 14, 2025
Malicious code in taurus-vulcan-paleoecology-sequelize (npm)
- Aug 14, 2025
Malicious code in taurus-transport-jwt-rimraf (npm)
- Aug 14, 2025
Malicious code in taurus-solarnebula-oberon-registry (npm)
- Aug 14, 2025
Malicious code in taurus-lyra-frontend-transform (npm)
- Aug 14, 2025
Malicious code in taurus-lacerta-cosmiconfig-futurology (npm)
- Aug 14, 2025
Malicious code in taurus-dotenv-safe-bionics-hugo (npm)
- Aug 14, 2025
Malicious code in taurus-ceres-configstore-pavo (npm)
- Aug 14, 2025
Malicious code in tau-encode-web-sed-small (npm)
- Aug 14, 2025
Malicious code in tatwebui (npm)
- Aug 14, 2025
Malicious code in tastegarden2025 (npm)
- Aug 14, 2025
Malicious code in tastegarden (npm)
- Aug 14, 2025
Malicious code in taskjar (npm)
- Aug 14, 2025
Malicious code in taskboard-form-builder (npm)
- Aug 14, 2025
Malicious code in taskboard-builder (npm)
- Aug 14, 2025
Malicious code in tashboard (npm)
- Aug 14, 2025
Malicious code in tarreusm (npm)
- Aug 14, 2025
Malicious code in tarisome (npm)
- Aug 14, 2025
Malicious code in tarhistory (npm)
- Aug 14, 2025
Malicious code in tardigrade-sagitta-asteroid-singularity (npm)
- Aug 14, 2025
Malicious code in tardigrade-public-rehype-uninstall (npm)
Page 5764 of 7,328