Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in karma-humanity-stack (npm)
- Aug 14, 2025
Malicious code in karma-hapi-sedna-testcafe (npm)
- Aug 14, 2025
Malicious code in karma-got-reveal-md-proxima (npm)
- Aug 14, 2025
Malicious code in karma-gatsby-virtualreality-concurrently (npm)
- Aug 14, 2025
Malicious code in karma-gatsby-nodejs-europa (npm)
- Aug 14, 2025
Malicious code in karma-b2ijo-n034e-yellow-project (npm)
- Aug 14, 2025
Malicious code in karma-550dy-x9a4k-gale-project (npm)
- Aug 14, 2025
Malicious code in karma-4wfu7-8esg8-twilight-project (npm)
- Aug 14, 2025
Malicious code in karma-4vbyb-kbfgk-juniper-project (npm)
- Aug 14, 2025
Malicious code in kardashevscale-markdown-pdf-cressida-fetch (npm)
- Aug 14, 2025
Malicious code in kardashevscale-hugo-wezen-luna (npm)
- Aug 14, 2025
Malicious code in kardashevscale-fornax-ceres-package (npm)
- Aug 14, 2025
Malicious code in kardashevscale-element-ui-element-ui-cosmogenic (npm)
- Aug 14, 2025
Malicious code in karboom (npm)
- Aug 14, 2025
Malicious code in karajinov (npm)
- Aug 14, 2025
Malicious code in karabulin (npm)
- Aug 14, 2025
Malicious code in kapsel-plugin-i18n (npm)
- Aug 14, 2025
Malicious code in kappaking (npm)
- Aug 14, 2025
Malicious code in kappa-gamma-byte-sandbox-cloud (npm)
- Aug 14, 2025
Malicious code in kapok-supernova-ap4u (npm)
- Aug 14, 2025
Malicious code in kapok-strawberry-fpcm (npm)
- Aug 14, 2025
Malicious code in kapok-hazel-w31k (npm)
- Aug 14, 2025
Malicious code in kapok-bravo-sfb2 (npm)
- Aug 14, 2025
Malicious code in kapok-blackhole-wuav (npm)
- Aug 14, 2025
Malicious code in kapok-apple-17oe (npm)
- Aug 14, 2025
Malicious code in kapian (npm)
- Aug 14, 2025
Malicious code in kaocious (npm)
- Aug 14, 2025
Malicious code in kanzeon (npm)
- Aug 14, 2025
Malicious code in kanjidex (npm)
- Aug 14, 2025
Malicious code in kangaroo-ziggurat-hg4z (npm)
- Aug 14, 2025
Malicious code in kangaroo-underpass-kdg1 (npm)
- Aug 14, 2025
Malicious code in kangaroo-meteor-y7m1 (npm)
- Aug 14, 2025
Malicious code in kangaroo-kiwi-3q02 (npm)
- Aug 14, 2025
Malicious code in kangaroo-dwarf-dqx2 (npm)
- Aug 14, 2025
Malicious code in kanchuan-nvrenxin-mihuo-nanrenzhen (npm)
- Aug 14, 2025
Malicious code in kanaquiz (npm)
- Aug 14, 2025
Malicious code in kamonetuzx (npm)
- Aug 14, 2025
Malicious code in kamonetuv (npm)
- Aug 14, 2025
Malicious code in kamonetuq (npm)
- Aug 14, 2025
Malicious code in kamonetum (npm)
- Aug 14, 2025
Malicious code in kamonetucx (npm)
- Aug 14, 2025
Malicious code in kamonetucl (npm)
- Aug 14, 2025
Malicious code in kamonetuck (npm)
- Aug 14, 2025
Malicious code in kamonetucj (npm)
- Aug 14, 2025
Malicious code in kamonetuci (npm)
- Aug 14, 2025
Malicious code in kamonetuch (npm)
- Aug 14, 2025
Malicious code in kamonetucg (npm)
- Aug 14, 2025
Malicious code in kamonetucf (npm)
- Aug 14, 2025
Malicious code in kamonetuce (npm)
- Aug 14, 2025
Malicious code in kamonetucd (npm)
Page 5505 of 6,634