Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in key-recovery-service-v2 (npm)
- Aug 14, 2025
Malicious code in key-pi-string-byte-easy (npm)
- Aug 14, 2025
Malicious code in kettlers (npm)
- Aug 14, 2025
Malicious code in kestrel_xytu1_61sdy_meadow (npm)
- Aug 14, 2025
Malicious code in kestrel_w9n41_eqgxd_kaleidoscope (npm)
- Aug 14, 2025
Malicious code in kestrel_ropuk_yjllf_quicksilver (npm)
- Aug 14, 2025
Malicious code in kestrel_r5j8s_lh6f6_crystal (npm)
- Aug 14, 2025
Malicious code in kestrel_pymox_6wh87_ocean (npm)
- Aug 14, 2025
Malicious code in kestrel_6udmw_ispp1_hush (npm)
- Aug 14, 2025
Malicious code in kestrel-zrs7t-6e2fc-lavender-project (npm)
- Aug 14, 2025
Malicious code in kestrel-ziyzj-cbipt-quicksilver-project (npm)
- Aug 14, 2025
Malicious code in kestrel-uplift-psk732-project (npm)
- Aug 14, 2025
Malicious code in kestrel-iuz5s-c3us9-dynamo-project (npm)
- Aug 14, 2025
Malicious code in kestrel-bn23z-8ai06-ember-project (npm)
- Aug 14, 2025
Malicious code in kespapp (npm)
- Aug 14, 2025
Malicious code in keroris (npm)
- Aug 14, 2025
Malicious code in kerocinedeizel (npm)
- Aug 14, 2025
Malicious code in kernellib (npm)
- Aug 14, 2025
Malicious code in kernel-iota-simple-simulate-integer (npm)
- Aug 14, 2025
Malicious code in kernel-abstract-compile-proxy-orchestrate (npm)
- Aug 14, 2025
Malicious code in keresztes (npm)
- Aug 14, 2025
Malicious code in kentico-kontent-angular-http-service (npm)
- Aug 14, 2025
Malicious code in kentest (npm)
- Aug 14, 2025
Malicious code in kelp-yacht-slw305-project (npm)
- Aug 14, 2025
Malicious code in kelp-xylophone-gpk255-project (npm)
- Aug 14, 2025
Malicious code in kelp-whirlpool-rjg403-project (npm)
- Aug 14, 2025
Malicious code in kelp-tide-azp985-project (npm)
- Aug 14, 2025
Malicious code in kelp-reef-fcj514-project (npm)
- Aug 14, 2025
Malicious code in kelp-phv21-uhi1b-rose-project (npm)
- Aug 14, 2025
Malicious code in kelp-nimbus-ahk549-project (npm)
- Aug 14, 2025
Malicious code in kelp-mieow-7b9r2-alchemy-project (npm)
- Aug 14, 2025
Malicious code in kelp-kiwi-wji912-project (npm)
- Aug 14, 2025
Malicious code in kelp-kap3d-l0sah-lichen-project (npm)
- Aug 14, 2025
Malicious code in kelp-il8b0-gyeqx-coral-project (npm)
- Aug 14, 2025
Malicious code in kelp-iceberg-vlx739-project (npm)
- Aug 14, 2025
Malicious code in kelp-hxsmg-z9po5-silk-project (npm)
- Aug 14, 2025
Malicious code in kelp-horizon-pnc039-project (npm)
- Aug 14, 2025
Malicious code in kelp-horizon-eua884-project (npm)
- Aug 14, 2025
Malicious code in kelp-hill-kfn417-project (npm)
- Aug 14, 2025
Malicious code in kelp-grove-tfv987-project (npm)
- Aug 14, 2025
Malicious code in kelp-gorilla-eaa530-project (npm)
- Aug 14, 2025
Malicious code in kelp-fox-bkt354-project (npm)
- Aug 14, 2025
Malicious code in kelp-fjord-sxj057-project (npm)
- Aug 14, 2025
Malicious code in kelp-dragon-vrd871-project (npm)
- Aug 14, 2025
Malicious code in kelp-br0yo-tus4l-vista-project (npm)
- Aug 14, 2025
Malicious code in kelp-aspen-ipb400-project (npm)
- Aug 14, 2025
Malicious code in kelp-48i4l-nypqa-grove-project (npm)
- Aug 14, 2025
Malicious code in kelp-30onm-abxgx-frost-project (npm)
- Aug 14, 2025
Malicious code in keikogi (npm)
- Aug 14, 2025
Malicious code in kegcop (npm)
Page 5503 of 6,634