Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in orbit-india-u4ak (npm)
- Aug 14, 2025
Malicious code in orbit-equinox-hawkingradiation-quito (npm)
- Aug 14, 2025
Malicious code in orawork (npm)
- Aug 14, 2025
Malicious code in orangutan-xenon-qdp576-project (npm)
- Aug 14, 2025
Malicious code in orangutan-wave-yxm325-project (npm)
- Aug 14, 2025
Malicious code in orangutan-reef-qfs159-project (npm)
- Aug 14, 2025
Malicious code in orangutan-mist-lsj231-project (npm)
- Aug 14, 2025
Malicious code in orangutan-harbor-nbd505-project (npm)
- Aug 14, 2025
Malicious code in orangutan-desert-jdr695-project (npm)
- Aug 14, 2025
Malicious code in orangutan-cloud-xvk864-project (npm)
- Aug 14, 2025
Malicious code in orangutan-cloud-gen530-project (npm)
- Aug 14, 2025
Malicious code in orangutan-aspen-env983-project (npm)
- Aug 14, 2025
Malicious code in orangutan-aroma-cjo803-project (npm)
- Aug 14, 2025
Malicious code in orange-zv5-project (npm)
- Aug 14, 2025
Malicious code in orange-zcx-project (npm)
- Aug 14, 2025
Malicious code in orange-yp2-project (npm)
- Aug 14, 2025
Malicious code in orange-yankee-mzux (npm)
- Aug 14, 2025
Malicious code in orange-yam-mviu (npm)
- Aug 14, 2025
Malicious code in orange-xfv-project (npm)
- Aug 14, 2025
Malicious code in orange-victor-juliet-azolk (npm)
- Aug 14, 2025
Malicious code in orange-victor-jdxc (npm)
- Aug 14, 2025
Malicious code in orange-victor-bravo-lzgvu (npm)
- Aug 14, 2025
Malicious code in orange-vanilla-nasp (npm)
- Aug 14, 2025
Malicious code in orange-vanilla-fjhw (npm)
- Aug 14, 2025
Malicious code in orange-uniform-yuzh (npm)
- Aug 14, 2025
Malicious code in orange-uniform-sbtp (npm)
- Aug 14, 2025
Malicious code in orange-uniform-hjny (npm)
- Aug 14, 2025
Malicious code in orange-ugli-inar (npm)
- Aug 14, 2025
Malicious code in orange-ua6-project (npm)
- Aug 14, 2025
Malicious code in orange-u3k-project (npm)
- Aug 14, 2025
Malicious code in orange-temple-0wtk (npm)
- Aug 14, 2025
Malicious code in orange-strawberry-november-akwlc (npm)
- Aug 14, 2025
Malicious code in orange-sierra-zulu-ltkie (npm)
- Aug 14, 2025
Malicious code in orange-sierra-zmkr (npm)
- Aug 14, 2025
Malicious code in orange-shl-project (npm)
- Aug 14, 2025
Malicious code in orange-rrj-project (npm)
- Aug 14, 2025
Malicious code in orange-quebec-india-ggjuj (npm)
- Aug 14, 2025
Malicious code in orange-q0a-project (npm)
- Aug 14, 2025
Malicious code in orange-papaya-ietx (npm)
- Aug 14, 2025
Malicious code in orange-oscar-fpob (npm)
- Aug 14, 2025
Malicious code in orange-nrt-project (npm)
- Aug 14, 2025
Malicious code in orange-november-wssc (npm)
- Aug 14, 2025
Malicious code in orange-msl-project (npm)
- Aug 14, 2025
Malicious code in orange-mike-papa-iapwb (npm)
- Aug 14, 2025
Malicious code in orange-mango-mng9 (npm)
- Aug 14, 2025
Malicious code in orange-mango-mike-naomg (npm)
- Aug 14, 2025
Malicious code in orange-mango-jyrb (npm)
- Aug 14, 2025
Malicious code in orange-mango-izlo (npm)
- Aug 14, 2025
Malicious code in orange-mango-ifrk (npm)
- Aug 14, 2025
Malicious code in orange-kvz-project (npm)
Page 5852 of 7,293