Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in tangerine-hgy-project (npm)
- Aug 14, 2025
Malicious code in tangerine-gfu-project (npm)
- Aug 14, 2025
Malicious code in tangerine-foxtrot-fsnk (npm)
- Aug 14, 2025
Malicious code in tangerine-foxtrot-charlie-rffuv (npm)
- Aug 14, 2025
Malicious code in tangerine-echo-fsrf (npm)
- Aug 14, 2025
Malicious code in tangerine-date-raspberry-qbjuh (npm)
- Aug 14, 2025
Malicious code in tangerine-cherry-eknf (npm)
- Aug 14, 2025
Malicious code in tangerine-bridge-t7tn (npm)
- Aug 14, 2025
Malicious code in tangerine-bravo-veqd (npm)
- Aug 14, 2025
Malicious code in tangerine-bravo-qlzh (npm)
- Aug 14, 2025
Malicious code in tangerine-bravo-lhhr (npm)
- Aug 14, 2025
Malicious code in tangerine-banana-qvcy (npm)
- Aug 14, 2025
Malicious code in tangerine-auu-project (npm)
- Aug 14, 2025
Malicious code in tangerine-at2-project (npm)
- Aug 14, 2025
Malicious code in tangerine-akt-project (npm)
- Aug 14, 2025
Malicious code in tangerine-7ns-project (npm)
- Aug 14, 2025
Malicious code in tangerine-7ep-project (npm)
- Aug 14, 2025
Malicious code in tangerine-4dj-project (npm)
- Aug 14, 2025
Malicious code in tangerine-189-project (npm)
- Aug 14, 2025
Malicious code in tangerine-0i8-project (npm)
- Aug 14, 2025
Malicious code in tangerine-04r-project (npm)
- Aug 14, 2025
Malicious code in tameshi (npm)
- Aug 14, 2025
Malicious code in tally-factory (npm)
- Aug 14, 2025
Malicious code in talkscape (npm)
- Aug 14, 2025
Malicious code in talksaver (npm)
- Aug 14, 2025
Malicious code in talento (npm)
- Aug 14, 2025
Malicious code in talecraft (npm)
- Aug 14, 2025
Malicious code in takktile (npm)
- Aug 14, 2025
Malicious code in takeshequ (npm)
- Aug 14, 2025
Malicious code in takepart-gallery (npm)
- Aug 14, 2025
Malicious code in takamura (npm)
- Aug 14, 2025
Malicious code in tajluzekfhkocnqb (npm)
- Aug 14, 2025
Malicious code in tajigon (npm)
- Aug 14, 2025
Malicious code in taiwnet (npm)
- Aug 14, 2025
Malicious code in tainted_love (npm)
- Aug 14, 2025
Malicious code in tailwindcss-pulsar-hyperion-standard (npm)
- Aug 14, 2025
Malicious code in tailwindcss-process-enceladus-rehype (npm)
- Aug 14, 2025
Malicious code in tailwindcss-first-line (npm)
- Aug 14, 2025
Malicious code in tailwindcss-charon-callisto-acamar (npm)
- Aug 14, 2025
Malicious code in tailwindcss-animate-plus (npm)
- Aug 14, 2025
Malicious code in tailwind_lodash (npm)
- Aug 14, 2025
Malicious code in tail-observable (npm)
- Aug 14, 2025
Malicious code in tahasiraj-ts-2004-oop-project-10 (npm)
- Aug 14, 2025
Malicious code in tahasiraj-2004-45-assignments (npm)
- Aug 14, 2025
Malicious code in tagstop (npm)
- Aug 14, 2025
Malicious code in tagsfs (npm)
- Aug 14, 2025
Malicious code in tagmusic (npm)
- Aug 14, 2025
Malicious code in tagmata (npm)
- Aug 14, 2025
Malicious code in taglibkit (npm)
- Aug 14, 2025
Malicious code in taggram (npm)
Page 5334 of 6,665