Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,319 total · sorted newest first- Aug 14, 2025
Malicious code in ortstafel (npm)
- Aug 14, 2025
Malicious code in orthodox-feasts (npm)
- Aug 14, 2025
Malicious code in ort_wgsl_template_gen (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in ort-rn-basic-usage (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in orqvwdjkekhultsm (npm)
- Aug 14, 2025
Malicious code in orogeny-transform-paleobotany-ursa (npm)
- Aug 14, 2025
Malicious code in orogeny-titan-test-xanadu (npm)
- Aug 14, 2025
Malicious code in ormblog (npm)
- Aug 14, 2025
Malicious code in orionfs (npm)
- Aug 14, 2025
Malicious code in origgami (npm)
- Aug 14, 2025
Malicious code in orgman (npm)
- Aug 14, 2025
Malicious code in org.eclipse.n4js.sample.utils (npm)
- Aug 14, 2025
Malicious code in oregano-umbrella-t4me (npm)
- Aug 14, 2025
Malicious code in oregano-penguin-qkli (npm)
- Aug 14, 2025
Malicious code in ords-db-mongoaws (npm)
- Aug 14, 2025
Malicious code in orderly-js-sdk-remix-template (npm)
- Aug 14, 2025
Malicious code in orderly-js-sdk-nextjs-template (npm)
- Aug 14, 2025
Malicious code in order-management-system (npm)
- Aug 14, 2025
Malicious code in orchid-xenon-cfr506-project (npm)
- Aug 14, 2025
Malicious code in orchid-vale-mwv292-project (npm)
- Aug 14, 2025
Malicious code in orchid-sapphire-ymd094-project (npm)
- Aug 14, 2025
Malicious code in orchid-peony-kgf706-project (npm)
- Aug 14, 2025
Malicious code in orchid-mangrove-xft413-project (npm)
- Aug 14, 2025
Malicious code in orchid-falcon-hus327-project (npm)
- Aug 14, 2025
Malicious code in orchid-everglow-lsh735-project (npm)
- Aug 14, 2025
Malicious code in orchid-dragon-zwm865-project (npm)
- Aug 14, 2025
Malicious code in Orchestrator (npm)
- Aug 14, 2025
Malicious code in orchestrate-finally-static-long-cloud (npm)
- Aug 14, 2025
Malicious code in orbitdb (npm)
- Aug 14, 2025
Malicious code in orbit-zenith-57oh (npm)
- Aug 14, 2025
Malicious code in orbit-technosignature-playwright-abiogenesis (npm)
- Aug 14, 2025
Malicious code in orbit-t4hmg-n2rl2-obsidian-project (npm)
- Aug 14, 2025
Malicious code in orbit-spruce-pfi8 (npm)
- Aug 14, 2025
Malicious code in orbit-sierra-wmm8 (npm)
- Aug 14, 2025
Malicious code in orbit-shack-b97t (npm)
- Aug 14, 2025
Malicious code in orbit-s6j0d-ys784-twilight-project (npm)
- Aug 14, 2025
Malicious code in orbit-qih17-ujnrc-whisper-project (npm)
- Aug 14, 2025
Malicious code in orbit-parallax-init-canopus (npm)
- Aug 14, 2025
Malicious code in orbit-papa-yfi5 (npm)
- Aug 14, 2025
Malicious code in orbit-ocean-zs01 (npm)
- Aug 14, 2025
Malicious code in orbit-mountain-gar6 (npm)
- Aug 14, 2025
Malicious code in orbit-jetty-8bzr (npm)
- Aug 14, 2025
Malicious code in orbit-india-u4ak (npm)
- Aug 14, 2025
Malicious code in orbit-equinox-hawkingradiation-quito (npm)
- Aug 14, 2025
Malicious code in orawork (npm)
- Aug 14, 2025
Malicious code in orangutan-xenon-qdp576-project (npm)
- Aug 14, 2025
Malicious code in orangutan-wave-yxm325-project (npm)
- Aug 14, 2025
Malicious code in orangutan-reef-qfs159-project (npm)
- Aug 14, 2025
Malicious code in orangutan-mist-lsj231-project (npm)
- Aug 14, 2025
Malicious code in orangutan-harbor-nbd505-project (npm)
Page 5885 of 7,327