Free tool

Public threat feed.

Recent malicious packages and extensions across twelve ecosystems, updated continuously. Filter by ecosystem, search by name or id, and consume it as JSON in your own tooling.

109,429 total3,506 Chrome91,578 npm11,900 PyPI105,884 removed from store
Ecosystem
Page 1 of 4,378Advisory threat intelligence
EcosystemPackage / extensionThreatStatusAddedSeverity
ChromeIvpnPolicy ViolationRemoved2026-06-30listed
ChromeKawaakPolicy ViolationRemoved2026-06-30listed
ChromeForge PrototypePolicy ViolationRemoved2026-06-30listed
ChromeTurtleWave SearchSearch HijackingIn store2026-06-30listed
ChromeSendpilotPolicy ViolationRemoved2026-06-30listed
ChromeSearch Control for Chrome.Search HijackingIn store2026-06-30listed
ChromePn CopilotPolicy ViolationRemoved2026-06-30listed
ChromeProspio ConnectorPolicy ViolationRemoved2026-06-29listed
ChromePhishscope — Url Risk AnaPolicy ViolationRemoved2026-06-29listed
VS Codesuper-agentimpersonationRemoved2026-06-29high
VS Codekilo-code-plusimpersonationRemoved2026-06-29high
VS Codecisco-ngimpersonationRemoved2026-06-29high
VS CodeworklaneuntrustworthyRemoved2026-06-29medium
PyPIdjango-bkvisionmalicious-packageRemoved2026-06-29listed
edgeSpeakIt!adwareRemoved2026-06-29listed
edgeBatch Image DownloaderadwareRemoved2026-06-29listed
edgeDownload All ImagesadwareRemoved2026-06-29listed
edgeUndo Closed TabsadwareRemoved2026-06-29listed
edgeAI Search GPT for EdgeadwareRemoved2026-06-29listed
edgeAdblock MasteradwareRemoved2026-06-29listed
edgeAxure RP VieweradwareRemoved2026-06-29listed
edgeAI Weather ForecastadwareRemoved2026-06-29listed
edgeColor by NumberadwareRemoved2026-06-29listed
edgeGoogle HangoutsadwareRemoved2026-06-29listed
edgeYoutube Adblock OnlineadwareRemoved2026-06-29listed
... 4,378

Advisory only, provided as is with no warranty. A result here is not a guarantee of safety or of compromise.

Use the feed

The same data is available as JSON for researchers and tooling. It is anonymous and rate limited. Page through it with the page and page_size parameters (page_size up to 100), and filter with store and q.

GET https://extuno.com/ext/v1/threat-feed?store=&q=&page=1&page_size=50

Each item carries store, name, ext_id, threat_type, severity, still_active, and date. A single newest page is also available at /ext/v1/malicious-recent?limit=N.