Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in kiwi-zr2-project (npm)
- Aug 14, 2025
Malicious code in kiwi-ynq-project (npm)
- Aug 14, 2025
Malicious code in kiwi-yeti-kdz317-project (npm)
- Aug 14, 2025
Malicious code in kiwi-yacht-vtmp (npm)
- Aug 14, 2025
Malicious code in kiwi-xigua-x9qd (npm)
- Aug 14, 2025
Malicious code in kiwi-xigua-h597 (npm)
- Aug 14, 2025
Malicious code in kiwi-whiskey-78kf (npm)
- Aug 14, 2025
Malicious code in kiwi-watermelon-banana-zabnl (npm)
- Aug 14, 2025
Malicious code in kiwi-vista-csy498-project (npm)
- Aug 14, 2025
Malicious code in kiwi-vanilla-htjd (npm)
- Aug 14, 2025
Malicious code in kiwi-v11-project (npm)
- Aug 14, 2025
Malicious code in kiwi-uranium-fkn516-project (npm)
- Aug 14, 2025
Malicious code in kiwi-uniform-tango-lsird (npm)
- Aug 14, 2025
Malicious code in kiwi-tundra-kew950-project (npm)
- Aug 14, 2025
Malicious code in kiwi-tundra-cdd408-project (npm)
- Aug 14, 2025
Malicious code in kiwi-tt4-project (npm)
- Aug 14, 2025
Malicious code in kiwi-tkk-project (npm)
- Aug 14, 2025
Malicious code in kiwi-tangerine-eofx (npm)
- Aug 14, 2025
Malicious code in kiwi-strawberry-yam-qnhow (npm)
- Aug 14, 2025
Malicious code in kiwi-star-chn001-project (npm)
- Aug 14, 2025
Malicious code in kiwi-sierra-nrpz (npm)
- Aug 14, 2025
Malicious code in kiwi-sequoia-jmd582-project (npm)
- Aug 14, 2025
Malicious code in kiwi-saturn-ymt368-project (npm)
- Aug 14, 2025
Malicious code in kiwi-romeo-banana-tngno (npm)
- Aug 14, 2025
Malicious code in kiwi-ripple-ujc543-project (npm)
- Aug 14, 2025
Malicious code in kiwi-reef-hib694-project (npm)
- Aug 14, 2025
Malicious code in kiwi-raspberry-rbgj (npm)
- Aug 14, 2025
Malicious code in kiwi-quince-dtya (npm)
- Aug 14, 2025
Malicious code in kiwi-quince-abim (npm)
- Aug 14, 2025
Malicious code in kiwi-quill-awy160-project (npm)
- Aug 14, 2025
Malicious code in kiwi-quebec-qjfc (npm)
- Aug 14, 2025
Malicious code in kiwi-quebec-ngyf (npm)
- Aug 14, 2025
Malicious code in kiwi-quasar-qeu197-project (npm)
- Aug 14, 2025
Malicious code in kiwi-qlk-project (npm)
- Aug 14, 2025
Malicious code in kiwi-prairie-btj223-project (npm)
- Aug 14, 2025
Malicious code in kiwi-platform (npm)
- Aug 14, 2025
Malicious code in kiwi-pkt-project (npm)
- Aug 14, 2025
Malicious code in kiwi-piano-skj156-project (npm)
- Aug 14, 2025
Malicious code in kiwi-piano-rtj084-project (npm)
- Aug 14, 2025
Malicious code in kiwi-pg4-project (npm)
- Aug 14, 2025
Malicious code in kiwi-peony-hln756-project (npm)
- Aug 14, 2025
Malicious code in kiwi-peacock-qji902-project (npm)
- Aug 14, 2025
Malicious code in kiwi-pde-project (npm)
- Aug 14, 2025
Malicious code in kiwi-papa-ipts (npm)
- Aug 14, 2025
Malicious code in kiwi-papa-fxbu (npm)
- Aug 14, 2025
Malicious code in kiwi-p3k-project (npm)
- Aug 14, 2025
Malicious code in kiwi-oscar-papaya-psfdy (npm)
- Aug 14, 2025
Malicious code in kiwi-orange-swzm (npm)
- Aug 14, 2025
Malicious code in kiwi-opal-cen382-project (npm)
- Aug 14, 2025
Malicious code in kiwi-ocean-ojn981-project (npm)
Page 5498 of 6,634