Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in keebler-paypal (npm)
- Aug 14, 2025
Malicious code in keccak256-helper (npm)
- Aug 14, 2025
Malicious code in kearys (npm)
- Aug 14, 2025
Malicious code in kdofmjlhupveskwq (npm)
- Aug 14, 2025
Malicious code in kdkskx (npm)
- Aug 14, 2025
Malicious code in kdjn6p3rsskz9lm3zchrej7gymbpbe4v (npm)
- Aug 14, 2025
Malicious code in kdbt2 (npm)
- Aug 14, 2025
Malicious code in kcruby (npm)
- Aug 14, 2025
Malicious code in kcpycamp (npm)
- Aug 14, 2025
Malicious code in kcpb (npm)
- Aug 14, 2025
Malicious code in kccenter (npm)
- Aug 14, 2025
Malicious code in kbrltzqeasmipudy (npm)
- Aug 14, 2025
Malicious code in kbounce (npm)
- Aug 14, 2025
Malicious code in kbkjyqzmfxuhodnt (npm)
- Aug 14, 2025
Malicious code in kbfnqgrwpkumvcyi (npm)
- Aug 14, 2025
Malicious code in kbezvoastwprqmdu (npm)
- Aug 14, 2025
Malicious code in kbcontrol (npm)
- Aug 14, 2025
Malicious code in kayqcs (npm)
- Aug 14, 2025
Malicious code in kayak-yam-duob (npm)
- Aug 14, 2025
Malicious code in kayak-drone-ypze (npm)
- Aug 14, 2025
Malicious code in kaus-unuk-miranda-radiant (npm)
- Aug 14, 2025
Malicious code in kaus-petrology-postcss-loader-andromeda (npm)
- Aug 14, 2025
Malicious code in kaus-pavo-grus-ignite (npm)
- Aug 14, 2025
Malicious code in kaus-oauth-chakra-ui-membrane (npm)
- Aug 14, 2025
Malicious code in kaus-less-karma-nova (npm)
- Aug 14, 2025
Malicious code in kaus-bootes-quark-sirius (npm)
- Aug 14, 2025
Malicious code in kaus-auth-hermes-parcel (npm)
- Aug 14, 2025
Malicious code in kaula (npm)
- Aug 14, 2025
Malicious code in kato-memory (npm)
- Aug 14, 2025
Malicious code in kato-local (npm)
- Aug 14, 2025
Malicious code in katari (npm)
- Aug 14, 2025
Malicious code in kastra-tachyon-andromeda-passport (npm)
- Aug 14, 2025
Malicious code in kastra-regulus-yonder-magnetosphere (npm)
- Aug 14, 2025
Malicious code in kastra-pm2-tardigrade-paleomagnetism (npm)
- Aug 14, 2025
Malicious code in kastra-neutronstar-tardigrade-perseus (npm)
- Aug 14, 2025
Malicious code in kastra-gravity-oauth-hermes (npm)
- Aug 14, 2025
Malicious code in kastra-flare-wasat-nodemon (npm)
- Aug 14, 2025
Malicious code in kasino (npm)
- Aug 14, 2025
Malicious code in kashable-mobile-common (npm)
- Aug 14, 2025
Malicious code in karone (npm)
- Aug 14, 2025
Malicious code in karma_m7rym_98yk3_vortex (npm)
- Aug 14, 2025
Malicious code in karma_ezdnq_hgl1e_phoenix (npm)
- Aug 14, 2025
Malicious code in karma_a70l3_z1fzv_kryptonite (npm)
- Aug 14, 2025
Malicious code in karma-webpack-deployment-test (npm)
- Aug 14, 2025
Malicious code in karma-ulx2j-ax8si-hearth-project (npm)
- Aug 14, 2025
Malicious code in karma-tmpl2html-preprocessor (npm)
- Aug 14, 2025
Malicious code in karma-repository-request-helmet (npm)
- Aug 14, 2025
Malicious code in karma-puida-4cu7u-quiver-project (npm)
- Aug 14, 2025
Malicious code in karma-middleware (npm)
- Aug 14, 2025
Malicious code in karma-jnaf9-xzor1-lavender-project (npm)
Page 5504 of 6,634