Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Aug 14, 2025
Malicious code in tango-quebec-orange-hkhug (npm)
- Aug 14, 2025
Malicious code in tango-q0f-project (npm)
- Aug 14, 2025
Malicious code in tango-pwf-project (npm)
- Aug 14, 2025
Malicious code in tango-pine-9wif (npm)
- Aug 14, 2025
Malicious code in tango-penguin-7tci (npm)
- Aug 14, 2025
Malicious code in tango-papaya-ugli-catcx (npm)
- Aug 14, 2025
Malicious code in tango-papa-ejgg (npm)
- Aug 14, 2025
Malicious code in tango-oscar-mike-xfvxh (npm)
- Aug 14, 2025
Malicious code in tango-oscar-inmf (npm)
- Aug 14, 2025
Malicious code in tango-orange-whiskey-qmruh (npm)
- Aug 14, 2025
Malicious code in tango-nectarine-znnp (npm)
- Aug 14, 2025
Malicious code in tango-nectarine-papa-ghttt (npm)
- Aug 14, 2025
Malicious code in tango-nectarine-egrn (npm)
- Aug 14, 2025
Malicious code in tango-mike-xafz (npm)
- Aug 14, 2025
Malicious code in tango-maple-rv2b (npm)
- Aug 14, 2025
Malicious code in tango-krh-project (npm)
- Aug 14, 2025
Malicious code in tango-kqh-project (npm)
- Aug 14, 2025
Malicious code in tango-kilo-orange-itjhe (npm)
- Aug 14, 2025
Malicious code in tango-juliet-4h1g (npm)
- Aug 14, 2025
Malicious code in tango-jht-project (npm)
- Aug 14, 2025
Malicious code in tango-ir3-project (npm)
- Aug 14, 2025
Malicious code in tango-india-watermelon-akemy (npm)
- Aug 14, 2025
Malicious code in tango-gyf-project (npm)
- Aug 14, 2025
Malicious code in tango-grape-ytpc (npm)
- Aug 14, 2025
Malicious code in tango-grape-banana-zodll (npm)
- Aug 14, 2025
Malicious code in tango-flare-1huo (npm)
- Aug 14, 2025
Malicious code in tango-fig-tangerine-dygmb (npm)
- Aug 14, 2025
Malicious code in tango-elderberry-cherry-seoxo (npm)
- Aug 14, 2025
Malicious code in tango-dhw-project (npm)
- Aug 14, 2025
Malicious code in tango-delta-kxpi (npm)
- Aug 14, 2025
Malicious code in tango-ddv-project (npm)
- Aug 14, 2025
Malicious code in tango-date-charlie-alxkv (npm)
- Aug 14, 2025
Malicious code in tango-cherry-xigua-libbl (npm)
- Aug 14, 2025
Malicious code in tango-azi-project (npm)
- Aug 14, 2025
Malicious code in tango-apple-rcre (npm)
- Aug 14, 2025
Malicious code in tango-apple-fobg (npm)
- Aug 14, 2025
Malicious code in tango-alpha-yhai (npm)
- Aug 14, 2025
Malicious code in tango-3zq-project (npm)
- Aug 14, 2025
Malicious code in tango-2qe-project (npm)
- Aug 14, 2025
Malicious code in tango-13j-project (npm)
- Aug 14, 2025
Malicious code in tanglc (npm)
- Aug 14, 2025
Malicious code in tangerine-zulu-pyzp (npm)
- Aug 14, 2025
Malicious code in tangerine-znp-project (npm)
- Aug 14, 2025
Malicious code in tangerine-zf1-project (npm)
- Aug 14, 2025
Malicious code in tangerine-ze4-project (npm)
- Aug 14, 2025
Malicious code in tangerine-yam-fluz (npm)
- Aug 14, 2025
Malicious code in tangerine-xray-juliet-iswjn (npm)
- Aug 14, 2025
Malicious code in tangerine-xigua-kbbe (npm)
- Aug 14, 2025
Malicious code in tangerine-xigua-djdm (npm)
- Aug 14, 2025
Malicious code in tangerine-xigua-alki (npm)
Page 5766 of 7,328