Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,582 total · sorted newest first- Sep 17, 2026
Malicious code in labour_caterpillar_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in la-pem-misa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in labour_basilisk_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kylinjs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in labour_heron_requirement (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kz-fe-v3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in labour_ferret-silentdev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in labour_louse_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in labour_louse_dumbs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in la-interactive-readerui (npm)
1 compromised version
- Sep 17, 2026
Malicious code in labour_lobster_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in l10n-mgr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuryaken (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-function-huge (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-wajit22-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kwappen (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-wajit25-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kwp-a-b-testing (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-wajit3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-discussion-wide (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-scene-early (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-dggs-dfflgh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-silly-excited (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kwai-pymk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-dfhsahj-fhjk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kvasirapi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-tower-toward (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-gdfs-fhjk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-slide-ten (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kvgnvn-devapptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-fallen-widely (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-got-constantly (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kvanity (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-complete-themselves (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-dfdhhjf-fhjk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-wajit42-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-nails-attached (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-ghgfj-dffgh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kusahaeru (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kutgmbawxcorveif (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-soldier-fog (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-dfdhhjf-dffgh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-men-spell (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-fghgj-dfflgh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kw-styles (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-dfhhj-fhjk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-fghgj-dffgh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuvvet_poc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurskvwnliatdpoq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat61-sluey (npm)
1 compromised version
Page 171 of 7,312