Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in orange-kiwi-tjta (npm)
- Aug 14, 2025
Malicious code in orange-kilo-hotel-hpjhr (npm)
- Aug 14, 2025
Malicious code in orange-kilo-bygp (npm)
- Aug 14, 2025
Malicious code in orange-jw2-project (npm)
- Aug 14, 2025
Malicious code in orange-juliet-oscar-xrhtz (npm)
- Aug 14, 2025
Malicious code in orange-jbk-project (npm)
- Aug 14, 2025
Malicious code in orange-gq1-project (npm)
- Aug 14, 2025
Malicious code in orange-golf-strawberry-jxssf (npm)
- Aug 14, 2025
Malicious code in orange-golf-omkm (npm)
- Aug 14, 2025
Malicious code in orange-golf-mike-qwkwk (npm)
- Aug 14, 2025
Malicious code in orange-games-splash (npm)
- Aug 14, 2025
Malicious code in orange-foxtrot-lful (npm)
- Aug 14, 2025
Malicious code in orange-echo-qkbe (npm)
- Aug 14, 2025
Malicious code in orange-echo-papa-bkgwv (npm)
- Aug 14, 2025
Malicious code in orange-echo-izdd (npm)
- Aug 14, 2025
Malicious code in orange-echo-grmn (npm)
- Aug 14, 2025
Malicious code in orange-e2u-project (npm)
- Aug 14, 2025
Malicious code in orange-delta-qqwa (npm)
- Aug 14, 2025
Malicious code in orange-cherry-vrym (npm)
- Aug 14, 2025
Malicious code in orange-cherry-fig-aukxu (npm)
- Aug 14, 2025
Malicious code in orange-c2b-project (npm)
- Aug 14, 2025
Malicious code in orange-bravo-rroh (npm)
- Aug 14, 2025
Malicious code in orange-banana-xray-lihbv (npm)
- Aug 14, 2025
Malicious code in orange-banana-victor-fkyxx (npm)
- Aug 14, 2025
Malicious code in orange-banana-ugli-aahjr (npm)
- Aug 14, 2025
Malicious code in orange-banana-imbt (npm)
- Aug 14, 2025
Malicious code in orange-9ql-project (npm)
- Aug 14, 2025
Malicious code in orange-91b-project (npm)
- Aug 14, 2025
Malicious code in orange-8zg-project (npm)
- Aug 14, 2025
Malicious code in orange-8xd-project (npm)
- Aug 14, 2025
Malicious code in orange-7oi-project (npm)
- Aug 14, 2025
Malicious code in orange-462-project (npm)
- Aug 14, 2025
Malicious code in oracle-h5wa9-x4t03-oasis-project (npm)
- Aug 14, 2025
Malicious code in oracle-etb4u-oxccq-xenon-project (npm)
- Aug 14, 2025
Malicious code in ora-centauri-nconf-venus (npm)
- Aug 14, 2025
Malicious code in oqpbkcjedrvlfkwu (npm)
- Aug 14, 2025
Malicious code in opusdac (npm)
- Aug 14, 2025
Malicious code in optsoft (npm)
- Aug 14, 2025
Malicious code in optrun (npm)
- Aug 14, 2025
Malicious code in optimystic-hello-world (npm)
- Aug 14, 2025
Malicious code in optimize-sudo-spy-omega-error (npm)
- Aug 14, 2025
Malicious code in optimize-root-minify-long-grid (npm)
- Aug 14, 2025
Malicious code in optimize-css-assets-webpack-plugin-quantum-supervisor-oscillation (npm)
- Aug 14, 2025
Malicious code in optimize-css-assets-webpack-plugin-pulsar-inquirer-juno (npm)
- Aug 14, 2025
Malicious code in optimize-css-assets-webpack-plugin-odin-slides-izar (npm)
- Aug 14, 2025
Malicious code in optimize-css-assets-webpack-plugin-octans-eslint-config-farout (npm)
- Aug 14, 2025
Malicious code in optimize-css-assets-webpack-plugin-node-config-europa-native (npm)
- Aug 14, 2025
Malicious code in optimium (npm)
- Aug 14, 2025
Malicious code in opstools (npm)
- Aug 14, 2025
Malicious code in opstarts-ui (npm)
Page 5853 of 7,293