Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in mango-wmu-project (npm)
- Aug 14, 2025
Malicious code in mango-wasabi-qhd3 (npm)
- Aug 14, 2025
Malicious code in mango-victor-xylb (npm)
- Aug 14, 2025
Malicious code in mango-victor-lfyq (npm)
- Aug 14, 2025
Malicious code in mango-vanilla-strawberry-vrojw (npm)
- Aug 14, 2025
Malicious code in mango-uniform-elgx (npm)
- Aug 14, 2025
Malicious code in mango-uaz-project (npm)
- Aug 14, 2025
Malicious code in mango-tangerine-golf-wazkc (npm)
- Aug 14, 2025
Malicious code in mango-t29-project (npm)
- Aug 14, 2025
Malicious code in mango-sierra-ehjd (npm)
- Aug 14, 2025
Malicious code in mango-rqx-project (npm)
- Aug 14, 2025
Malicious code in mango-romeo-qtpk (npm)
- Aug 14, 2025
Malicious code in mango-raspberry-honeydew-fbhhz (npm)
- Aug 14, 2025
Malicious code in mango-quince-qarn (npm)
- Aug 14, 2025
Malicious code in mango-o78-project (npm)
- Aug 14, 2025
Malicious code in mango-november-ohgb (npm)
- Aug 14, 2025
Malicious code in mango-november-honeydew-bddyq (npm)
- Aug 14, 2025
Malicious code in mango-november-bequ (npm)
- Aug 14, 2025
Malicious code in mango-node (npm)
- Aug 14, 2025
Malicious code in mango-mxn-project (npm)
- Aug 14, 2025
Malicious code in mango-mike-kilo-zldbh (npm)
- Aug 14, 2025
Malicious code in mango-mcs-project (npm)
- Aug 14, 2025
Malicious code in mango-lion-30gs (npm)
- Aug 14, 2025
Malicious code in mango-lima-wzan (npm)
- Aug 14, 2025
Malicious code in mango-lemon-sfxg (npm)
- Aug 14, 2025
Malicious code in mango-lemon-lima-iuixk (npm)
- Aug 14, 2025
Malicious code in mango-kilo-zmit (npm)
- Aug 14, 2025
Malicious code in mango-juliet-utzw (npm)
- Aug 14, 2025
Malicious code in mango-juliet-banana-eilha (npm)
- Aug 14, 2025
Malicious code in mango-jbe-project (npm)
- Aug 14, 2025
Malicious code in mango-golf-nxiz (npm)
- Aug 14, 2025
Malicious code in mango-golf-mwpi (npm)
- Aug 14, 2025
Malicious code in mango-golf-lemon-aezga (npm)
- Aug 14, 2025
Malicious code in mango-gkb-project (npm)
- Aug 14, 2025
Malicious code in mango-fp2-project (npm)
- Aug 14, 2025
Malicious code in mango-foxtrot-watermelon-sqhng (npm)
- Aug 14, 2025
Malicious code in mango-foxtrot-watermelon-sajvt (npm)
- Aug 14, 2025
Malicious code in mango-elderberry-wsvy (npm)
- Aug 14, 2025
Malicious code in mango-elderberry-tangerine-gczlq (npm)
- Aug 14, 2025
Malicious code in mango-elderberry-omje (npm)
- Aug 14, 2025
Malicious code in mango-echo-yjlz (npm)
- Aug 14, 2025
Malicious code in mango-e8w-project (npm)
- Aug 14, 2025
Malicious code in mango-delta-yxrr (npm)
- Aug 14, 2025
Malicious code in mango-date-hjjb (npm)
- Aug 14, 2025
Malicious code in mango-bdt-project (npm)
- Aug 14, 2025
Malicious code in mango-banana-ogmg (npm)
- Aug 14, 2025
Malicious code in mango-9yi-project (npm)
- Aug 14, 2025
Malicious code in mango-8wo-project (npm)
- Aug 14, 2025
Malicious code in mango-84e-project (npm)
- Aug 14, 2025
Malicious code in mango-5j4-project (npm)
Page 5474 of 6,634