Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in kiwi-1in-project (npm)
- Aug 14, 2025
Malicious code in kiwi-11i-project (npm)
- Aug 14, 2025
Malicious code in kivra_accounts (npm)
- Aug 14, 2025
Malicious code in kittcv (npm)
- Aug 14, 2025
Malicious code in kitidea (npm)
- Aug 14, 2025
Malicious code in kite-zephyr-lfp952-project (npm)
- Aug 14, 2025
Malicious code in kite-zenith-ayc406-project (npm)
- Aug 14, 2025
Malicious code in kite-zenith-acr160-project (npm)
- Aug 14, 2025
Malicious code in kite-zebra-ivk392-project (npm)
- Aug 14, 2025
Malicious code in kite-xerus-piz525-project (npm)
- Aug 14, 2025
Malicious code in kite-violet-vot485-project (npm)
- Aug 14, 2025
Malicious code in kite-tide-ujy175-project (npm)
- Aug 14, 2025
Malicious code in kite-quill-rbc948-project (npm)
- Aug 14, 2025
Malicious code in kite-nimbus-qim719-project (npm)
- Aug 14, 2025
Malicious code in kite-nebula-jmk767-project (npm)
- Aug 14, 2025
Malicious code in kite-nautilus-xuw856-project (npm)
- Aug 14, 2025
Malicious code in kite-lava-dst303-project (npm)
- Aug 14, 2025
Malicious code in kite-jellyfish-cay885-project (npm)
- Aug 14, 2025
Malicious code in kite-infinity-lub379-project (npm)
- Aug 14, 2025
Malicious code in kite-galaxy-oee736-project (npm)
- Aug 14, 2025
Malicious code in kite-coral-wsr217-project (npm)
- Aug 14, 2025
Malicious code in kite-butterfly-cvi553-project (npm)
- Aug 14, 2025
Malicious code in kite-bonfire-gvl276-project (npm)
- Aug 14, 2025
Malicious code in kite-blossom-uir971-project (npm)
- Aug 14, 2025
Malicious code in kite-acorn-acs890-project (npm)
- Aug 14, 2025
Malicious code in kitchen-shopify-provisioner (npm)
- Aug 14, 2025
Malicious code in kisschat (npm)
- Aug 14, 2025
Malicious code in kismet_n88o7_qg3ic_illusion (npm)
- Aug 14, 2025
Malicious code in kismet_htksa_lkizq_xylophone (npm)
- Aug 14, 2025
Malicious code in kismet-whisper-nde416-project (npm)
- Aug 14, 2025
Malicious code in kismet-uu89h-xl76p-verdure-project (npm)
- Aug 14, 2025
Malicious code in kismet-nhxw8-ow6kg-nectar-project (npm)
- Aug 14, 2025
Malicious code in kismet-7lvgb-9jpwm-tempest-project (npm)
- Aug 14, 2025
Malicious code in kirogi (npm)
- Aug 14, 2025
Malicious code in kirbyterm (npm)
- Aug 14, 2025
Malicious code in kiokuryou (npm)
- Aug 14, 2025
Malicious code in kinvey-phonegap-angular-sdk (npm)
- Aug 14, 2025
Malicious code in kintisheff-sak (npm)
- Aug 14, 2025
Malicious code in kintisheff-geo (npm)
- Aug 14, 2025
Malicious code in kinterval (npm)
- Aug 14, 2025
Malicious code in kintek (npm)
- Aug 14, 2025
Malicious code in kinopoisk-yav-client (npm)
- Aug 14, 2025
Malicious code in kinopoisk-components (npm)
- Aug 14, 2025
Malicious code in kingweb (npm)
- Aug 14, 2025
Malicious code in kingofpol (npm)
- Aug 14, 2025
Malicious code in kingchos (npm)
- Aug 14, 2025
Malicious code in kinetic-release-it-perseus-ursa (npm)
- Aug 14, 2025
Malicious code in kinetic-mui-fornax-postcss (npm)
- Aug 14, 2025
Malicious code in kinetic-mongodb-lepton-rollup-plugin (npm)
- Aug 14, 2025
Malicious code in kinetic-inquirer-element-ui-chai (npm)
Page 5500 of 6,634