Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in kurnia-ongol-ongol51-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurnia-nasisayur64-kuki (npm)
- Aug 14, 2025
Malicious code in kurnia-nasicampur75-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-kue32-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-jus88-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurnia-getuk5-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-dodol21-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-bakwan30-breki (npm)
- Aug 14, 2025
Malicious code in kurdish-time (npm)
- Aug 14, 2025
Malicious code in kupciaapp (npm)
- Aug 14, 2025
Malicious code in kuntreejs (npm)
- Aug 14, 2025
Malicious code in kunstuni (npm)
- Aug 14, 2025
Malicious code in kumiho (npm)
- Aug 14, 2025
Malicious code in kulngoitb (npm)
- Aug 14, 2025
Malicious code in kujibiki (npm)
- Aug 14, 2025
Malicious code in kuiperbelt-proxima-izar-native (npm)
- Aug 14, 2025
Malicious code in kuiperbelt-loopback-solis-oortcloud (npm)
- Aug 14, 2025
Malicious code in kuiper-rainbow-i4u5 (npm)
- Aug 14, 2025
Malicious code in kuiper-orange-yabh (npm)
- Aug 14, 2025
Malicious code in kuiper-orange-m3ie (npm)
- Aug 14, 2025
Malicious code in kuiper-lemon-8y0t (npm)
- Aug 14, 2025
Malicious code in kuiper-kale-6bfm (npm)
- Aug 14, 2025
Malicious code in kuimwubna (npm)
- Aug 14, 2025
Malicious code in kue-worker (npm)
- Aug 14, 2025
Malicious code in kubernetes-deploy (npm)
- Aug 14, 2025
Malicious code in kube-config (npm)
- Aug 14, 2025
Malicious code in ktyt3 (npm)
- Aug 14, 2025
Malicious code in ktreehr (npm)
- Aug 14, 2025
Malicious code in ktimeline (npm)
- Aug 14, 2025
Malicious code in kte2www (npm)
- Aug 14, 2025
Malicious code in kstars (npm)
- Aug 14, 2025
Malicious code in ksmylz (npm)
- Aug 14, 2025
Malicious code in ksl-weather (npm)
- Aug 14, 2025
Malicious code in ksimzflpubgwrxhj (npm)
- Aug 14, 2025
Malicious code in ksekina (npm)
- Aug 14, 2025
Malicious code in ksachin (npm)
- Aug 14, 2025
Malicious code in ks-sha3 (npm)
- Aug 14, 2025
Malicious code in kryptor-session (npm)
- Aug 14, 2025
Malicious code in kryptor-csrf (npm)
- Aug 14, 2025
Malicious code in kryptonite_yy0w1_1u2xo_keystone (npm)
- Aug 14, 2025
Malicious code in kryptonite_xa6kb_wk46r_whisper (npm)
- Aug 14, 2025
Malicious code in kryptonite_5c0w5_iu9lc_jade (npm)
- Aug 14, 2025
Malicious code in kronos-rest-sedna-umbriel (npm)
- Aug 14, 2025
Malicious code in kronos-areology-javascript-publish (npm)
- Aug 14, 2025
Malicious code in kripto (npm)
- Aug 14, 2025
Malicious code in kresna-tomat25-breki (npm)
- Aug 14, 2025
Malicious code in kresna-rawon91-breki (npm)
- Aug 14, 2025
Malicious code in kresna-rangginang31-sukiwir (npm)
- Aug 14, 2025
Malicious code in kresna-oncom84-breki (npm)
- Aug 14, 2025
Malicious code in kresna-lontong80-kuki (npm)
Page 5495 of 6,634