Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in tango-xigua-mwnx (npm)
- Aug 14, 2025
Malicious code in tango-xigua-banana-wzvue (npm)
- Aug 14, 2025
Malicious code in tango-victor-zuob (npm)
- Aug 14, 2025
Malicious code in tango-vanilla-november-ydtrz (npm)
- Aug 14, 2025
Malicious code in tango-vanilla-jjio (npm)
- Aug 14, 2025
Malicious code in tango-uniform-ztrg (npm)
- Aug 14, 2025
Malicious code in tango-uniform-vanilla-oksjz (npm)
- Aug 14, 2025
Malicious code in tango-ugli-foxtrot-eblpx (npm)
- Aug 14, 2025
Malicious code in tango-uat-project (npm)
- Aug 14, 2025
Malicious code in tango-tangerine-frcn (npm)
- Aug 14, 2025
Malicious code in tango-sby-project (npm)
- Aug 14, 2025
Malicious code in tango-romeo-nwgr (npm)
- Aug 14, 2025
Malicious code in tango-romeo-lzmd (npm)
- Aug 14, 2025
Malicious code in tango-raspberry-qrab (npm)
- Aug 14, 2025
Malicious code in tango-quince-victor-bctde (npm)
- Aug 14, 2025
Malicious code in tango-quince-nyks (npm)
- Aug 14, 2025
Malicious code in tango-quebec-sdwx (npm)
- Aug 14, 2025
Malicious code in tango-quebec-orange-hkhug (npm)
- Aug 14, 2025
Malicious code in tango-q0f-project (npm)
- Aug 14, 2025
Malicious code in tango-pwf-project (npm)
- Aug 14, 2025
Malicious code in tango-pine-9wif (npm)
- Aug 14, 2025
Malicious code in tango-penguin-7tci (npm)
- Aug 14, 2025
Malicious code in tango-papaya-ugli-catcx (npm)
- Aug 14, 2025
Malicious code in tango-papa-ejgg (npm)
- Aug 14, 2025
Malicious code in tango-oscar-mike-xfvxh (npm)
- Aug 14, 2025
Malicious code in tango-oscar-inmf (npm)
- Aug 14, 2025
Malicious code in tango-orange-whiskey-qmruh (npm)
- Aug 14, 2025
Malicious code in tango-nectarine-znnp (npm)
- Aug 14, 2025
Malicious code in tango-nectarine-papa-ghttt (npm)
- Aug 14, 2025
Malicious code in tango-nectarine-egrn (npm)
- Aug 14, 2025
Malicious code in tango-mike-xafz (npm)
- Aug 14, 2025
Malicious code in tango-maple-rv2b (npm)
- Aug 14, 2025
Malicious code in tango-krh-project (npm)
- Aug 14, 2025
Malicious code in tango-kqh-project (npm)
- Aug 14, 2025
Malicious code in tango-kilo-orange-itjhe (npm)
- Aug 14, 2025
Malicious code in tango-juliet-4h1g (npm)
- Aug 14, 2025
Malicious code in tango-jht-project (npm)
- Aug 14, 2025
Malicious code in tango-ir3-project (npm)
- Aug 14, 2025
Malicious code in tango-india-watermelon-akemy (npm)
- Aug 14, 2025
Malicious code in tango-gyf-project (npm)
- Aug 14, 2025
Malicious code in tango-grape-ytpc (npm)
- Aug 14, 2025
Malicious code in tango-grape-banana-zodll (npm)
- Aug 14, 2025
Malicious code in tango-flare-1huo (npm)
- Aug 14, 2025
Malicious code in tango-fig-tangerine-dygmb (npm)
- Aug 14, 2025
Malicious code in tango-elderberry-cherry-seoxo (npm)
- Aug 14, 2025
Malicious code in tango-dhw-project (npm)
- Aug 14, 2025
Malicious code in tango-delta-kxpi (npm)
- Aug 14, 2025
Malicious code in tango-ddv-project (npm)
- Aug 14, 2025
Malicious code in tango-date-charlie-alxkv (npm)
- Aug 14, 2025
Malicious code in tango-cherry-xigua-libbl (npm)
Page 5332 of 6,665