Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in labyrinth-nymph-axa394-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-everest-rgd440-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-ecosystem-hdd962-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-coral-bci338-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-cliff-zmj835-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-cascade-hrg076-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-aspen-uzq799-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-albatross-opo606-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-2my8w-67ept-nebula-project (npm)
- Aug 14, 2025
Malicious code in labyrinth-09y80-pq6ds-opal-project (npm)
- Aug 14, 2025
Malicious code in labyrint (npm)
- Aug 14, 2025
Malicious code in labsheets (npm)
- Aug 14, 2025
Malicious code in labruna (npm)
- Aug 14, 2025
Malicious code in labber (npm)
- Aug 14, 2025
Malicious code in la-widget-login (npm)
- Aug 14, 2025
Malicious code in la-interactive-readerui (npm)
- Aug 14, 2025
Malicious code in l3mon-dashboard (npm)
- Aug 14, 2025
Malicious code in l3mon-chat (npm)
- Aug 14, 2025
Malicious code in l3mon-blog (npm)
- Aug 14, 2025
Malicious code in l3mon (npm)
- Aug 14, 2025
Malicious code in l10n-mgr (npm)
- Aug 14, 2025
Malicious code in kzmvopafdywcukxs (npm)
- Aug 14, 2025
Malicious code in kz-fe-v3 (npm)
- Aug 14, 2025
Malicious code in kyso-instance-server (npm)
- Aug 14, 2025
Malicious code in kyso-cloud (npm)
- Aug 14, 2025
Malicious code in kylinjs (npm)
- Aug 14, 2025
Malicious code in kyc-sdk-javascript (npm)
- Aug 14, 2025
Malicious code in kwtest-styleguide (npm)
- Aug 14, 2025
Malicious code in kwpresent (npm)
- Aug 14, 2025
Malicious code in kwappen (npm)
- Aug 14, 2025
Malicious code in kw-styles (npm)
- Aug 14, 2025
Malicious code in kvasirapi (npm)
- Aug 14, 2025
Malicious code in kvanity (npm)
- Aug 14, 2025
Malicious code in kutgmbawxcorveif (npm)
- Aug 14, 2025
Malicious code in kusahaeru (npm)
- Aug 14, 2025
Malicious code in kurskvwnliatdpoq (npm)
- Aug 14, 2025
Malicious code in kurniawan-tongseng29-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-semur87-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-semur13-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-saguer46-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurniawan-rendang99-kuki (npm)
- Aug 14, 2025
Malicious code in kurniawan-martabak58-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-kue34-kuki (npm)
- Aug 14, 2025
Malicious code in kurniawan-klanting18-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-kepok100-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-kentang75-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurniawan-gembus21-kuki (npm)
- Aug 14, 2025
Malicious code in kurniawan-botok61-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-sambalado28-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurnia-rawon62-breki (npm)
Page 5494 of 6,634