Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,319 total · sorted newest first- Aug 14, 2025
Malicious code in oscar-papaya-gune (npm)
- Aug 14, 2025
Malicious code in oscar-orange-lima-drkjr (npm)
- Aug 14, 2025
Malicious code in oscar-ocean-bwn0 (npm)
- Aug 14, 2025
Malicious code in oscar-november-rxtr (npm)
- Aug 14, 2025
Malicious code in oscar-november-iexh (npm)
- Aug 14, 2025
Malicious code in oscar-nectarine-sierra-bqkzp (npm)
- Aug 14, 2025
Malicious code in oscar-nectarine-juliet-aawnf (npm)
- Aug 14, 2025
Malicious code in oscar-n14-project (npm)
- Aug 14, 2025
Malicious code in oscar-lemon-watermelon-qgpvr (npm)
- Aug 14, 2025
Malicious code in oscar-kiwi-delta-rlfmh (npm)
- Aug 14, 2025
Malicious code in oscar-jungle-21if (npm)
- Aug 14, 2025
Malicious code in oscar-iib-project (npm)
- Aug 14, 2025
Malicious code in oscar-hotel-quince-zdgqg (npm)
- Aug 14, 2025
Malicious code in oscar-gxx-project (npm)
- Aug 14, 2025
Malicious code in oscar-grape-ctzf (npm)
- Aug 14, 2025
Malicious code in oscar-golf-zavu (npm)
- Aug 14, 2025
Malicious code in oscar-golf-victor-djxma (npm)
- Aug 14, 2025
Malicious code in oscar-golf-ftll (npm)
- Aug 14, 2025
Malicious code in oscar-foxtrot-papaya-mzahy (npm)
- Aug 14, 2025
Malicious code in oscar-flare-9prr (npm)
- Aug 14, 2025
Malicious code in oscar-fig-rfdm (npm)
- Aug 14, 2025
Malicious code in oscar-echo-mxzz (npm)
- Aug 14, 2025
Malicious code in oscar-echo-ddfc (npm)
- Aug 14, 2025
Malicious code in oscar-echo-apple-jjknn (npm)
- Aug 14, 2025
Malicious code in oscar-dragonfruit-cpqb (npm)
- Aug 14, 2025
Malicious code in oscar-delta-biwp (npm)
- Aug 14, 2025
Malicious code in oscar-delta-8o0r (npm)
- Aug 14, 2025
Malicious code in oscar-db9-project (npm)
- Aug 14, 2025
Malicious code in oscar-date-nwcx (npm)
- Aug 14, 2025
Malicious code in oscar-d3u-project (npm)
- Aug 14, 2025
Malicious code in oscar-ck8-project (npm)
- Aug 14, 2025
Malicious code in oscar-cherry-zhvk (npm)
- Aug 14, 2025
Malicious code in oscar-charlie-mygc (npm)
- Aug 14, 2025
Malicious code in oscar-bur-project (npm)
- Aug 14, 2025
Malicious code in oscar-bravo-hfqr (npm)
- Aug 14, 2025
Malicious code in oscar-bravo-ekon (npm)
- Aug 14, 2025
Malicious code in oscar-bnq-project (npm)
- Aug 14, 2025
Malicious code in oscar-banana-mxth (npm)
- Aug 14, 2025
Malicious code in oscar-banana-dzuy (npm)
- Aug 14, 2025
Malicious code in oscar-alpha-tcux (npm)
- Aug 14, 2025
Malicious code in oscar-alpha-hwaa (npm)
- Aug 14, 2025
Malicious code in oscar-a7f-project (npm)
- Aug 14, 2025
Malicious code in oscar-8zz-project (npm)
- Aug 14, 2025
Malicious code in oscar-7s6-project (npm)
- Aug 14, 2025
Malicious code in oscar-62x-project (npm)
- Aug 14, 2025
Malicious code in osagence (npm)
- Aug 14, 2025
Malicious code in os_classification (npm)
- Aug 14, 2025
Malicious code in orzjpdugaxwqnkfb (npm)
- Aug 14, 2025
Malicious code in ory-editor-renderer-hubside (npm)
- Aug 14, 2025
Malicious code in ory-editor-core-hubside (npm)
Page 5884 of 7,327