Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in tldyfy (npm)
- Aug 19, 2022
Malicious code in tld5ify (npm)
- Aug 19, 2022
Malicious code in tioredks (npm)
- Aug 19, 2022
Malicious code in tinhcyxolor2 (npm)
- Aug 19, 2022
Malicious code in timhutable (npm)
- Aug 19, 2022
Malicious code in thts (npm)
- Aug 19, 2022
Malicious code in thgroukgg (npm)
- Aug 19, 2022
Malicious code in text-ytabl (npm)
- Aug 19, 2022
Malicious code in terser-ebrpack-plugin (npm)
- Aug 19, 2022
Malicious code in tdype-si (npm)
- Aug 19, 2022
Malicious code in t4peork3m (npm)
- Aug 19, 2022
Malicious code in t-simp8e (npm)
- Aug 19, 2022
Malicious code in sysezjs (npm)
- Aug 19, 2022
Malicious code in synfc-wrequest (npm)
- Aug 19, 2022
Malicious code in swlenium-wkebdriver (npm)
- Aug 19, 2022
Malicious code in sw-prescache-wubpack-plugin (npm)
- Aug 19, 2022
Malicious code in supoertes (npm)
- Aug 19, 2022
Malicious code in suorce-map (npm)
- Aug 19, 2022
Malicious code in suhallowexqual (npm)
- Aug 19, 2022
Malicious code in suer (npm)
- Aug 19, 2022
Malicious code in stylleint (npm)
- Aug 19, 2022
Malicious code in style-componenx (npm)
- Aug 19, 2022
Malicious code in strip-nasi (npm)
- Aug 19, 2022
Malicious code in strip-json-combmentd (npm)
- Aug 19, 2022
Malicious code in stnylelint-config-tandrad (npm)
- Aug 19, 2022
Malicious code in stlintreact (npm)
- Aug 19, 2022
Malicious code in stklus-loaer (npm)
- Aug 19, 2022
Malicious code in stcak-trace (npm)
- Aug 19, 2022
Malicious code in ss2 (npm)
- Aug 19, 2022
Malicious code in ss-loaoer (npm)
- Aug 19, 2022
Malicious code in srve-favico (npm)
- Aug 19, 2022
Malicious code in sqwli3 (npm)
- Aug 19, 2022
Malicious code in sptylelhnt-order (npm)
- Aug 19, 2022
Malicious code in sprinfjt (npm)
- Aug 19, 2022
Malicious code in sprin0f (npm)
- Aug 19, 2022
Malware in stylleint
1 compromised version
- Aug 19, 2022
Malware in sprin0f
1 compromised version
- Aug 19, 2022
Malware in strip-nasi
1 compromised version
- Aug 19, 2022
Malware in t-simp8e
1 compromised version
- Aug 19, 2022
Malware in ss-loaoer
1 compromised version
- Aug 19, 2022
Malware in uraib
1 compromised version
- Aug 19, 2022
Malware in swlenium-wkebdriver
1 compromised version
- Aug 19, 2022
Malware in synfc-wrequest
1 compromised version
- Aug 19, 2022
Malware in ull-tream
1 compromised version
- Aug 19, 2022
Malware in t4peork3m
1 compromised version
- Aug 19, 2022
Malware in unzdrscore
1 compromised version
- Aug 19, 2022
Malware in timhutable
1 compromised version
- Aug 19, 2022
Malware in unist-utilu-4visit
1 compromised version
- Aug 19, 2022
Malware in tsli
1 compromised version
- Aug 19, 2022
Malware in stnylelint-config-tandrad
1 compromised version
Page 7016 of 7,293