Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Aug 14, 2025
Malicious code in tangerine-whiskey-yam-slywd (npm)
- Aug 14, 2025
Malicious code in tangerine-whiskey-india-nmhij (npm)
- Aug 14, 2025
Malicious code in tangerine-vanilla-ugli-rpjrw (npm)
- Aug 14, 2025
Malicious code in tangerine-uu6-project (npm)
- Aug 14, 2025
Malicious code in tangerine-ugli-sierra-kagvn (npm)
- Aug 14, 2025
Malicious code in tangerine-ugli-qzor (npm)
- Aug 14, 2025
Malicious code in tangerine-ugli-date-ttnar (npm)
- Aug 14, 2025
Malicious code in tangerine-tvs-project (npm)
- Aug 14, 2025
Malicious code in tangerine-rgc-project (npm)
- Aug 14, 2025
Malicious code in tangerine-qwz-project (npm)
- Aug 14, 2025
Malicious code in tangerine-quince-yokw (npm)
- Aug 14, 2025
Malicious code in tangerine-quebec-ebpv (npm)
- Aug 14, 2025
Malicious code in tangerine-papa-hahr (npm)
- Aug 14, 2025
Malicious code in tangerine-orange-quebec-ibrgn (npm)
- Aug 14, 2025
Malicious code in tangerine-oh8-project (npm)
- Aug 14, 2025
Malicious code in tangerine-november-qzmu (npm)
- Aug 14, 2025
Malicious code in tangerine-november-mjeh (npm)
- Aug 14, 2025
Malicious code in tangerine-november-lemon-iuhqu (npm)
- Aug 14, 2025
Malicious code in tangerine-november-aofg (npm)
- Aug 14, 2025
Malicious code in tangerine-mt4-project (npm)
- Aug 14, 2025
Malicious code in tangerine-mja-project (npm)
- Aug 14, 2025
Malicious code in tangerine-mike-xray-bkfkl (npm)
- Aug 14, 2025
Malicious code in tangerine-mike-juliet-dpdhw (npm)
- Aug 14, 2025
Malicious code in tangerine-mike-ecmr (npm)
- Aug 14, 2025
Malicious code in tangerine-meteor-9eqc (npm)
- Aug 14, 2025
Malicious code in tangerine-mango-xvyy (npm)
- Aug 14, 2025
Malicious code in tangerine-lemon-ma27 (npm)
- Aug 14, 2025
Malicious code in tangerine-ko9-project (npm)
- Aug 14, 2025
Malicious code in tangerine-juliet-koid (npm)
- Aug 14, 2025
Malicious code in tangerine-jfs-project (npm)
- Aug 14, 2025
Malicious code in tangerine-india-vsls (npm)
- Aug 14, 2025
Malicious code in tangerine-icn-project (npm)
- Aug 14, 2025
Malicious code in tangerine-hotel-jogz (npm)
- Aug 14, 2025
Malicious code in tangerine-hgy-project (npm)
- Aug 14, 2025
Malicious code in tangerine-gfu-project (npm)
- Aug 14, 2025
Malicious code in tangerine-foxtrot-fsnk (npm)
- Aug 14, 2025
Malicious code in tangerine-foxtrot-charlie-rffuv (npm)
- Aug 14, 2025
Malicious code in tangerine-echo-fsrf (npm)
- Aug 14, 2025
Malicious code in tangerine-date-raspberry-qbjuh (npm)
- Aug 14, 2025
Malicious code in tangerine-cherry-eknf (npm)
- Aug 14, 2025
Malicious code in tangerine-bridge-t7tn (npm)
- Aug 14, 2025
Malicious code in tangerine-bravo-veqd (npm)
- Aug 14, 2025
Malicious code in tangerine-bravo-qlzh (npm)
- Aug 14, 2025
Malicious code in tangerine-bravo-lhhr (npm)
- Aug 14, 2025
Malicious code in tangerine-banana-qvcy (npm)
- Aug 14, 2025
Malicious code in tangerine-auu-project (npm)
- Aug 14, 2025
Malicious code in tangerine-at2-project (npm)
- Aug 14, 2025
Malicious code in tangerine-akt-project (npm)
- Aug 14, 2025
Malicious code in tangerine-7ns-project (npm)
- Aug 14, 2025
Malicious code in tangerine-7ep-project (npm)
Page 5767 of 7,328