Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Aug 14, 2025
Malicious code in tangerine-4dj-project (npm)
- Aug 14, 2025
Malicious code in tangerine-189-project (npm)
- Aug 14, 2025
Malicious code in tangerine-0i8-project (npm)
- Aug 14, 2025
Malicious code in tangerine-04r-project (npm)
- Aug 14, 2025
Malicious code in tameshi (npm)
- Aug 14, 2025
Malicious code in tally-factory (npm)
- Aug 14, 2025
Malicious code in talkscape (npm)
- Aug 14, 2025
Malicious code in talksaver (npm)
- Aug 14, 2025
Malicious code in talento (npm)
- Aug 14, 2025
Malicious code in talecraft (npm)
- Aug 14, 2025
Malicious code in takktile (npm)
- Aug 14, 2025
Malicious code in takeshequ (npm)
- Aug 14, 2025
Malicious code in takepart-gallery (npm)
- Aug 14, 2025
Malicious code in takamura (npm)
- Aug 14, 2025
Malicious code in tajluzekfhkocnqb (npm)
- Aug 14, 2025
Malicious code in tajigon (npm)
- Aug 14, 2025
Malicious code in taiwnet (npm)
- Aug 14, 2025
Malicious code in tainted_love (npm)
- Aug 14, 2025
Malicious code in tailwindcss-pulsar-hyperion-standard (npm)
- Aug 14, 2025
Malicious code in tailwindcss-process-enceladus-rehype (npm)
- Aug 14, 2025
Malicious code in tailwindcss-first-line (npm)
- Aug 14, 2025
Malicious code in tailwindcss-charon-callisto-acamar (npm)
- Aug 14, 2025
Malicious code in tailwindcss-animate-plus (npm)
- Aug 14, 2025
Malicious code in tailwind_lodash (npm)
- Aug 14, 2025
Malicious code in tail-observable (npm)
- Aug 14, 2025
Malicious code in tahasiraj-ts-2004-oop-project-10 (npm)
- Aug 14, 2025
Malicious code in tahasiraj-2004-45-assignments (npm)
- Aug 14, 2025
Malicious code in tagstop (npm)
- Aug 14, 2025
Malicious code in tagsfs (npm)
- Aug 14, 2025
Malicious code in tagmusic (npm)
- Aug 14, 2025
Malicious code in tagmata (npm)
- Aug 14, 2025
Malicious code in taglibkit (npm)
- Aug 14, 2025
Malicious code in taggram (npm)
- Aug 14, 2025
Malicious code in taggr (npm)
- Aug 14, 2025
Malicious code in tag-middleware (npm)
- Aug 14, 2025
Malicious code in taffydocs (npm)
- Aug 14, 2025
Malicious code in taekbae (npm)
- Aug 14, 2025
Malicious code in tad-icons (npm)
- Aug 14, 2025
Malicious code in tacoland (npm)
- Aug 14, 2025
Malicious code in tacktech (npm)
- Aug 14, 2025
Malicious code in tachyon-style-loader-sadr-hapi (npm)
- Aug 14, 2025
Malicious code in tabufi (npm)
- Aug 14, 2025
Malicious code in tabmark (npm)
- Aug 14, 2025
Malicious code in tablogo (npm)
- Aug 14, 2025
Malicious code in tablekit (npm)
- Aug 14, 2025
Malicious code in tableau_ruby (npm)
- Aug 14, 2025
Malicious code in table-query (npm)
- Aug 14, 2025
Malicious code in table-awk-epsilon-unix-route (npm)
- Aug 14, 2025
Malicious code in tablator (npm)
- Aug 14, 2025
Malicious code in tabisapo (npm)
Page 5768 of 7,328