Free tool

Public threat feed.

Recent malicious packages and extensions across twelve ecosystems, updated continuously. Filter by ecosystem and search by name or id. A JSON endpoint returns the same rows for your own tooling.

Ecosystem
Threat feedAdvisory threat intelligence
EcosystemPackage / extensionThreatStatusAddedSeverity
The service is unavailable right now. Please try again shortly.

Advisory only, provided as is with no warranty. A result here is not a guarantee of safety or of compromise.

Use the feed

The same data is available as JSON for researchers and tooling. It is anonymous and rate limited. Page through it with the page and page_size parameters (page_size up to 100), and filter with store and q.

GET https://extuno.com/ext/v1/threat-feed?store=&q=&page=1&page_size=50

Each item carries store, name, ext_id, threat_type, severity, still_active, and date. A single newest page is also available at /ext/v1/malicious-recent?limit=N.