Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in kinetic-blackhole-meteor-global (npm)
- Aug 14, 2025
Malicious code in kinectfun (npm)
- Aug 14, 2025
Malicious code in kindle-fast-metrics-javascript-sdk (npm)
- Aug 14, 2025
Malicious code in kinabalu (npm)
- Aug 14, 2025
Malicious code in kiloman (npm)
- Aug 14, 2025
Malicious code in kilo-zulu-lemon-rdmmz (npm)
- Aug 14, 2025
Malicious code in kilo-y7c-project (npm)
- Aug 14, 2025
Malicious code in kilo-xylophone-lpne (npm)
- Aug 14, 2025
Malicious code in kilo-x4x-project (npm)
- Aug 14, 2025
Malicious code in kilo-watermelon-xray-utiot (npm)
- Aug 14, 2025
Malicious code in kilo-victor-yikz (npm)
- Aug 14, 2025
Malicious code in kilo-victor-lgal (npm)
- Aug 14, 2025
Malicious code in kilo-victor-flhg (npm)
- Aug 14, 2025
Malicious code in kilo-vanilla-eemw (npm)
- Aug 14, 2025
Malicious code in kilo-ugli-byot (npm)
- Aug 14, 2025
Malicious code in kilo-strawberry-golf-yajmo (npm)
- Aug 14, 2025
Malicious code in kilo-strawberry-alpha-hgule (npm)
- Aug 14, 2025
Malicious code in kilo-sierra-romeo-udrgn (npm)
- Aug 14, 2025
Malicious code in kilo-romeo-aayf (npm)
- Aug 14, 2025
Malicious code in kilo-quince-shqr (npm)
- Aug 14, 2025
Malicious code in kilo-quince-quebec-uaxlq (npm)
- Aug 14, 2025
Malicious code in kilo-qhp-project (npm)
- Aug 14, 2025
Malicious code in kilo-puw-project (npm)
- Aug 14, 2025
Malicious code in kilo-papaya-tango-pfsth (npm)
- Aug 14, 2025
Malicious code in kilo-papaya-2dp8 (npm)
- Aug 14, 2025
Malicious code in kilo-papa-vanilla-fcghz (npm)
- Aug 14, 2025
Malicious code in kilo-papa-mkyi (npm)
- Aug 14, 2025
Malicious code in kilo-orbit-0a1b (npm)
- Aug 14, 2025
Malicious code in kilo-opp-project (npm)
- Aug 14, 2025
Malicious code in kilo-november-mango-zyghn (npm)
- Aug 14, 2025
Malicious code in kilo-nectarine-aatr (npm)
- Aug 14, 2025
Malicious code in kilo-n7n-project (npm)
- Aug 14, 2025
Malicious code in kilo-n3g-project (npm)
- Aug 14, 2025
Malicious code in kilo-mrx-project (npm)
- Aug 14, 2025
Malicious code in kilo-mike-krvc (npm)
- Aug 14, 2025
Malicious code in kilo-mango-delta-drtjv (npm)
- Aug 14, 2025
Malicious code in kilo-lemon-kiwi-ipkpx (npm)
- Aug 14, 2025
Malicious code in kilo-kiwi-kqtn (npm)
- Aug 14, 2025
Malicious code in kilo-kc0-project (npm)
- Aug 14, 2025
Malicious code in kilo-k0f-project (npm)
- Aug 14, 2025
Malicious code in kilo-jzf-project (npm)
- Aug 14, 2025
Malicious code in kilo-juliet-izxr (npm)
- Aug 14, 2025
Malicious code in kilo-iw6-project (npm)
- Aug 14, 2025
Malicious code in kilo-india-grape-ungnb (npm)
- Aug 14, 2025
Malicious code in kilo-honeydew-fxvu (npm)
- Aug 14, 2025
Malicious code in kilo-hn3-project (npm)
- Aug 14, 2025
Malicious code in kilo-hbh-project (npm)
- Aug 14, 2025
Malicious code in kilo-g0h-project (npm)
- Aug 14, 2025
Malicious code in kilo-fig-november-kytrn (npm)
- Aug 14, 2025
Malicious code in kilo-elderberry-kiwi-tkusp (npm)
Page 5501 of 6,634