Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in kilo-e96-project (npm)
- Aug 14, 2025
Malicious code in kilo-dez-project (npm)
- Aug 14, 2025
Malicious code in kilo-date-tahm (npm)
- Aug 14, 2025
Malicious code in kilo-charlie-vanilla-knnrn (npm)
- Aug 14, 2025
Malicious code in kilo-charlie-gdwh (npm)
- Aug 14, 2025
Malicious code in kilo-bravo-uniform-ypfwo (npm)
- Aug 14, 2025
Malicious code in kilo-apple-pmcv (npm)
- Aug 14, 2025
Malicious code in kilo-87k-project (npm)
- Aug 14, 2025
Malicious code in kilo-79y-project (npm)
- Aug 14, 2025
Malicious code in kilo-621-project (npm)
- Aug 14, 2025
Malicious code in kilo-5h9-project (npm)
- Aug 14, 2025
Malicious code in kilo-5ca-project (npm)
- Aug 14, 2025
Malicious code in kilo-2d8-project (npm)
- Aug 14, 2025
Malicious code in kilo-193-project (npm)
- Aug 14, 2025
Malicious code in killllock (npm)
- Aug 14, 2025
Malicious code in kikiru (npm)
- Aug 14, 2025
Malicious code in kiki-tempe72-sukiwir (npm)
- Aug 14, 2025
Malicious code in kiki-mendoan69-sukiwir (npm)
- Aug 14, 2025
Malicious code in kiki-kue74-breki (npm)
- Aug 14, 2025
Malicious code in kik-starter (npm)
- Aug 14, 2025
Malicious code in kifshare (npm)
- Aug 14, 2025
Malicious code in kievzplxrqshbgof (npm)
- Aug 14, 2025
Malicious code in kidsense (npm)
- Aug 14, 2025
Malicious code in kiddygeek (npm)
- Aug 14, 2025
Malicious code in kickbank (npm)
- Aug 14, 2025
Malicious code in kickass-component-library (npm)
- Aug 14, 2025
Malicious code in kickabout (npm)
- Aug 14, 2025
Malicious code in kiapasa (npm)
- Aug 14, 2025
Malicious code in khttpd (npm)
- Aug 14, 2025
Malicious code in khsgkyqmbjnuivpf (npm)
- Aug 14, 2025
Malicious code in kftsrxlpagdjhkvz (npm)
- Aug 14, 2025
Malicious code in kfsnaser (npm)
- Aug 14, 2025
Malicious code in kfalasa (npm)
- Aug 14, 2025
Malicious code in keyzen (npm)
- Aug 14, 2025
Malicious code in keyy (npm)
- Aug 14, 2025
Malicious code in keystone_yzv2t_pq7nv_solstice (npm)
- Aug 14, 2025
Malicious code in keystone_lldfp_zswue_hush (npm)
- Aug 14, 2025
Malicious code in keystone_h41zw_fglov_rainbow (npm)
- Aug 14, 2025
Malicious code in keystone_6bvec_7pepr_zodiac (npm)
- Aug 14, 2025
Malicious code in keystone_0bzhd_89wv0_blossom (npm)
- Aug 14, 2025
Malicious code in keystone-quzon-wwl1d-yonder-project (npm)
- Aug 14, 2025
Malicious code in keystone-q9lbl-2l4ff-quiver-project (npm)
- Aug 14, 2025
Malicious code in keystone-l3lm5-zmvsr-birch-project (npm)
- Aug 14, 2025
Malicious code in keystone-8xuj0-kbwlm-xenith-project (npm)
- Aug 14, 2025
Malicious code in keystone-4rmyi-tz6yz-nebula-project (npm)
- Aug 14, 2025
Malicious code in keystone-4r8qt-gojpm-fjord-project (npm)
- Aug 14, 2025
Malicious code in keycmd (npm)
- Aug 14, 2025
Malicious code in keycaster (npm)
- Aug 14, 2025
Malicious code in key_value_model (npm)
- Aug 14, 2025
Malicious code in key-sigma-dog-slow-authorize (npm)
Page 5502 of 6,634