Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in oscar-8zz-project (npm)
- Aug 14, 2025
Malicious code in oscar-7s6-project (npm)
- Aug 14, 2025
Malicious code in oscar-62x-project (npm)
- Aug 14, 2025
Malicious code in osagence (npm)
- Aug 14, 2025
Malicious code in os_classification (npm)
- Aug 14, 2025
Malicious code in orzjpdugaxwqnkfb (npm)
- Aug 14, 2025
Malicious code in ory-editor-renderer-hubside (npm)
- Aug 14, 2025
Malicious code in ory-editor-core-hubside (npm)
- Aug 14, 2025
Malicious code in ortstafel (npm)
- Aug 14, 2025
Malicious code in orthodox-feasts (npm)
- Aug 14, 2025
Malicious code in ort_wgsl_template_gen (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in ort-rn-basic-usage (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in orqvwdjkekhultsm (npm)
- Aug 14, 2025
Malicious code in orogeny-transform-paleobotany-ursa (npm)
- Aug 14, 2025
Malicious code in orogeny-titan-test-xanadu (npm)
- Aug 14, 2025
Malicious code in ormblog (npm)
- Aug 14, 2025
Malicious code in orionfs (npm)
- Aug 14, 2025
Malicious code in origgami (npm)
- Aug 14, 2025
Malicious code in orgman (npm)
- Aug 14, 2025
Malicious code in org.eclipse.n4js.sample.utils (npm)
- Aug 14, 2025
Malicious code in oregano-umbrella-t4me (npm)
- Aug 14, 2025
Malicious code in oregano-penguin-qkli (npm)
- Aug 14, 2025
Malicious code in ords-db-mongoaws (npm)
- Aug 14, 2025
Malicious code in orderly-js-sdk-remix-template (npm)
- Aug 14, 2025
Malicious code in orderly-js-sdk-nextjs-template (npm)
- Aug 14, 2025
Malicious code in order-management-system (npm)
- Aug 14, 2025
Malicious code in orchid-xenon-cfr506-project (npm)
- Aug 14, 2025
Malicious code in orchid-vale-mwv292-project (npm)
- Aug 14, 2025
Malicious code in orchid-sapphire-ymd094-project (npm)
- Aug 14, 2025
Malicious code in orchid-peony-kgf706-project (npm)
- Aug 14, 2025
Malicious code in orchid-mangrove-xft413-project (npm)
- Aug 14, 2025
Malicious code in orchid-falcon-hus327-project (npm)
- Aug 14, 2025
Malicious code in orchid-everglow-lsh735-project (npm)
- Aug 14, 2025
Malicious code in orchid-dragon-zwm865-project (npm)
- Aug 14, 2025
Malicious code in Orchestrator (npm)
- Aug 14, 2025
Malicious code in orchestrate-finally-static-long-cloud (npm)
- Aug 14, 2025
Malicious code in orbitdb (npm)
- Aug 14, 2025
Malicious code in orbit-zenith-57oh (npm)
- Aug 14, 2025
Malicious code in orbit-technosignature-playwright-abiogenesis (npm)
- Aug 14, 2025
Malicious code in orbit-t4hmg-n2rl2-obsidian-project (npm)
- Aug 14, 2025
Malicious code in orbit-spruce-pfi8 (npm)
- Aug 14, 2025
Malicious code in orbit-sierra-wmm8 (npm)
- Aug 14, 2025
Malicious code in orbit-shack-b97t (npm)
- Aug 14, 2025
Malicious code in orbit-s6j0d-ys784-twilight-project (npm)
- Aug 14, 2025
Malicious code in orbit-qih17-ujnrc-whisper-project (npm)
- Aug 14, 2025
Malicious code in orbit-parallax-init-canopus (npm)
- Aug 14, 2025
Malicious code in orbit-papa-yfi5 (npm)
- Aug 14, 2025
Malicious code in orbit-ocean-zs01 (npm)
- Aug 14, 2025
Malicious code in orbit-mountain-gar6 (npm)
- Aug 14, 2025
Malicious code in orbit-jetty-8bzr (npm)
Page 5851 of 7,293