Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in koala-crystal-lwy848-project (npm)
- Aug 14, 2025
Malicious code in koa-vulcan-auth-quasarjet (npm)
- Aug 14, 2025
Malicious code in koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics (npm)
- Aug 14, 2025
Malicious code in koa-speleology-greatfilter-gravitationalwave (npm)
- Aug 14, 2025
Malicious code in koa-redisy (npm)
- Aug 14, 2025
Malicious code in koa-react-sidecar (npm)
- Aug 14, 2025
Malicious code in koa-radioastronomy-cosmogenic-mongoose (npm)
- Aug 14, 2025
Malicious code in koa-mq (npm)
- Aug 14, 2025
Malicious code in koa-meteor-foundation-express (npm)
- Aug 14, 2025
Malicious code in koa-holography-charon-blueshift (npm)
- Aug 14, 2025
Malicious code in koa-highway (npm)
- Aug 14, 2025
Malicious code in koa-callback-ursa-private (npm)
- Aug 14, 2025
Malicious code in koa-body-parse (npm)
- Aug 14, 2025
Malicious code in knykode (npm)
- Aug 14, 2025
Malicious code in knowtify (npm)
- Aug 14, 2025
Malicious code in knowsql (npm)
- Aug 14, 2025
Malicious code in knotsy (npm)
- Aug 14, 2025
Malicious code in knoll-wlgpg-jmevs-radiance-project (npm)
- Aug 14, 2025
Malicious code in knoll-u8h2o-1k3qx-comet-project (npm)
- Aug 14, 2025
Malicious code in knoll-pcxw7-14c2a-comet-project (npm)
- Aug 14, 2025
Malicious code in knoll-l70vl-1ipps-opal-project (npm)
- Aug 14, 2025
Malicious code in knoll-gsc5b-abrky-coral-project (npm)
- Aug 14, 2025
Malicious code in knoll-enjzc-bj10j-whisper-project (npm)
- Aug 14, 2025
Malicious code in knoll-efow7-6ddj5-plume-project (npm)
- Aug 14, 2025
Malicious code in knoll-cbx0a-ruz7g-xanadu-project (npm)
- Aug 14, 2025
Malicious code in knoll-06u2w-hm6ri-vista-project (npm)
- Aug 14, 2025
Malicious code in knodat (npm)
- Aug 14, 2025
Malicious code in knmwitazqylrucfo (npm)
- Aug 14, 2025
Malicious code in knicks-store---nba-jersey (npm)
- Aug 14, 2025
Malicious code in knexpress (npm)
- Aug 14, 2025
Malicious code in knell-player (npm)
- Aug 14, 2025
Malicious code in knebe2 (npm)
- Aug 14, 2025
Malicious code in knabees (npm)
- Aug 14, 2025
Malicious code in kn96j1 (npm)
- Aug 14, 2025
Malicious code in kmp1lo (npm)
- Aug 14, 2025
Malicious code in klvapzgdusimojeb (npm)
- Aug 14, 2025
Malicious code in klicker (npm)
- Aug 14, 2025
Malicious code in klasemen-liga-inggris (npm)
- Aug 14, 2025
Malicious code in klaseko (npm)
- Aug 14, 2025
Malicious code in kknzougrdmvpfeat (npm)
- Aug 14, 2025
Malicious code in kk-proxy (npm)
- Aug 14, 2025
Malicious code in kjtkeygclqrsnoph (npm)
- Aug 14, 2025
Malicious code in kjnschqumowlxfze (npm)
- Aug 14, 2025
Malicious code in kjjr66 (npm)
- Aug 14, 2025
Malicious code in kjjgjgjkg (npm)
- Aug 14, 2025
Malicious code in kiwmnamnw (npm)
- Aug 14, 2025
Malicious code in kiwi-zulu-xnao (npm)
- Aug 14, 2025
Malicious code in kiwi-zulu-vdyv (npm)
- Aug 14, 2025
Malicious code in kiwi-zulu-anhj (npm)
- Aug 14, 2025
Malicious code in kiwi-zucchini-mfok (npm)
Page 5497 of 6,634