Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in kamonetucao (npm)
- Aug 14, 2025
Malicious code in kamonetucan (npm)
- Aug 14, 2025
Malicious code in kamonetucam (npm)
- Aug 14, 2025
Malicious code in kamonetucal (npm)
- Aug 14, 2025
Malicious code in kamonetucak (npm)
- Aug 14, 2025
Malicious code in kamonetucaj (npm)
- Aug 14, 2025
Malicious code in kamonetucai (npm)
- Aug 14, 2025
Malicious code in kamonetucah (npm)
- Aug 14, 2025
Malicious code in kamonetucaf (npm)
- Aug 14, 2025
Malicious code in kamonetucae (npm)
- Aug 14, 2025
Malicious code in kamonetucad (npm)
- Aug 14, 2025
Malicious code in kamonetucac (npm)
- Aug 14, 2025
Malicious code in kamonetucab (npm)
- Aug 14, 2025
Malicious code in kamonetucaa (npm)
- Aug 14, 2025
Malicious code in kamonetuca (npm)
- Aug 14, 2025
Malicious code in kamonetu (npm)
- Aug 14, 2025
Malicious code in kamoah (npm)
- Aug 14, 2025
Malicious code in kamilzakievtest (npm)
- Aug 14, 2025
Malicious code in kamel (npm)
- Aug 14, 2025
Malicious code in kalyet-were (npm)
1 compromised version
- Aug 14, 2025
Malicious code in kalmancpp (npm)
- Aug 14, 2025
Malicious code in kalins (npm)
- Aug 14, 2025
Malicious code in kaleidoscope_zveyk_qdbwf_legend (npm)
- Aug 14, 2025
Malicious code in kaleidoscope_rc9vy_j5jkj_echo (npm)
- Aug 14, 2025
Malicious code in kaleidoscope_lkrcu_kq1vq_jasmine (npm)
- Aug 14, 2025
Malicious code in kaleidoscope_bd5do_mx4jy_xylophone (npm)
- Aug 14, 2025
Malicious code in kaleidoscope_2l0s6_8l7bg_fable (npm)
- Aug 14, 2025
Malicious code in kaleidoscope_1gbk9_7e6o9_geyser (npm)
- Aug 14, 2025
Malicious code in kaleidoscope_042eg_jbbsp_infinity (npm)
- Aug 14, 2025
Malicious code in kaleidoscope-zebra-ese508-project (npm)
- Aug 14, 2025
Malicious code in kaleidoscope-volcano-qin433-project (npm)
- Aug 14, 2025
Malicious code in kaleidoscope-lagoon-gtt724-project (npm)
- Aug 14, 2025
Malicious code in kaleidoscope-jacket-mkz321-project (npm)
- Aug 14, 2025
Malicious code in kaleidoscope-honey-qmf958-project (npm)
- Aug 14, 2025
Malicious code in kaleidoscope-cliff-hou005-project (npm)
- Aug 14, 2025
Malicious code in kaleidoscope-amber-fga118-project (npm)
- Aug 14, 2025
Malicious code in kale_xct5d_i8r9l_honey (npm)
- Aug 14, 2025
Malicious code in kale_qbq2l_ewk7z_jigsaw (npm)
- Aug 14, 2025
Malicious code in kale_cqp5y_topr7_glow (npm)
- Aug 14, 2025
Malicious code in kale-zodiac-mnb231-project (npm)
- Aug 14, 2025
Malicious code in kale-zebra-vfn993-project (npm)
- Aug 14, 2025
Malicious code in kale-yeti-jwh365-project (npm)
- Aug 14, 2025
Malicious code in kale-xray-0qcg (npm)
- Aug 14, 2025
Malicious code in kale-xhxlp-pmkjh-lotus-project (npm)
- Aug 14, 2025
Malicious code in kale-x14vr-9y6vz-dynamo-project (npm)
- Aug 14, 2025
Malicious code in kale-umbrella-21h4 (npm)
- Aug 14, 2025
Malicious code in kale-temple-b2dw (npm)
- Aug 14, 2025
Malicious code in kale-so06i-wv8wt-jungle-project (npm)
- Aug 14, 2025
Malicious code in kale-sierra-e61y (npm)
- Aug 14, 2025
Malicious code in kale-s6pxe-583sx-valley-project (npm)
Page 5507 of 6,634