Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in tango-azi-project (npm)
- Aug 14, 2025
Malicious code in tango-apple-rcre (npm)
- Aug 14, 2025
Malicious code in tango-apple-fobg (npm)
- Aug 14, 2025
Malicious code in tango-alpha-yhai (npm)
- Aug 14, 2025
Malicious code in tango-3zq-project (npm)
- Aug 14, 2025
Malicious code in tango-2qe-project (npm)
- Aug 14, 2025
Malicious code in tango-13j-project (npm)
- Aug 14, 2025
Malicious code in tanglc (npm)
- Aug 14, 2025
Malicious code in tangerine-zulu-pyzp (npm)
- Aug 14, 2025
Malicious code in tangerine-znp-project (npm)
- Aug 14, 2025
Malicious code in tangerine-zf1-project (npm)
- Aug 14, 2025
Malicious code in tangerine-ze4-project (npm)
- Aug 14, 2025
Malicious code in tangerine-yam-fluz (npm)
- Aug 14, 2025
Malicious code in tangerine-xray-juliet-iswjn (npm)
- Aug 14, 2025
Malicious code in tangerine-xigua-kbbe (npm)
- Aug 14, 2025
Malicious code in tangerine-xigua-djdm (npm)
- Aug 14, 2025
Malicious code in tangerine-xigua-alki (npm)
- Aug 14, 2025
Malicious code in tangerine-whiskey-yam-slywd (npm)
- Aug 14, 2025
Malicious code in tangerine-whiskey-india-nmhij (npm)
- Aug 14, 2025
Malicious code in tangerine-vanilla-ugli-rpjrw (npm)
- Aug 14, 2025
Malicious code in tangerine-uu6-project (npm)
- Aug 14, 2025
Malicious code in tangerine-ugli-sierra-kagvn (npm)
- Aug 14, 2025
Malicious code in tangerine-ugli-qzor (npm)
- Aug 14, 2025
Malicious code in tangerine-ugli-date-ttnar (npm)
- Aug 14, 2025
Malicious code in tangerine-tvs-project (npm)
- Aug 14, 2025
Malicious code in tangerine-rgc-project (npm)
- Aug 14, 2025
Malicious code in tangerine-qwz-project (npm)
- Aug 14, 2025
Malicious code in tangerine-quince-yokw (npm)
- Aug 14, 2025
Malicious code in tangerine-quebec-ebpv (npm)
- Aug 14, 2025
Malicious code in tangerine-papa-hahr (npm)
- Aug 14, 2025
Malicious code in tangerine-orange-quebec-ibrgn (npm)
- Aug 14, 2025
Malicious code in tangerine-oh8-project (npm)
- Aug 14, 2025
Malicious code in tangerine-november-qzmu (npm)
- Aug 14, 2025
Malicious code in tangerine-november-mjeh (npm)
- Aug 14, 2025
Malicious code in tangerine-november-lemon-iuhqu (npm)
- Aug 14, 2025
Malicious code in tangerine-november-aofg (npm)
- Aug 14, 2025
Malicious code in tangerine-mt4-project (npm)
- Aug 14, 2025
Malicious code in tangerine-mja-project (npm)
- Aug 14, 2025
Malicious code in tangerine-mike-xray-bkfkl (npm)
- Aug 14, 2025
Malicious code in tangerine-mike-juliet-dpdhw (npm)
- Aug 14, 2025
Malicious code in tangerine-mike-ecmr (npm)
- Aug 14, 2025
Malicious code in tangerine-meteor-9eqc (npm)
- Aug 14, 2025
Malicious code in tangerine-mango-xvyy (npm)
- Aug 14, 2025
Malicious code in tangerine-lemon-ma27 (npm)
- Aug 14, 2025
Malicious code in tangerine-ko9-project (npm)
- Aug 14, 2025
Malicious code in tangerine-juliet-koid (npm)
- Aug 14, 2025
Malicious code in tangerine-jfs-project (npm)
- Aug 14, 2025
Malicious code in tangerine-india-vsls (npm)
- Aug 14, 2025
Malicious code in tangerine-icn-project (npm)
- Aug 14, 2025
Malicious code in tangerine-hotel-jogz (npm)
Page 5333 of 6,665