Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,587 total · sorted newest first- Sep 17, 2026
Malicious code in kuroichi12-dfhhj-fhjk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuroichi12-fghgj-dffgh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuvvet_poc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurskvwnliatdpoq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat61-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tongseng53-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tongseng72-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat14-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat41-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tiwul55-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tumis10-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tiwul73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat93-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tongseng58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ubi45-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat20-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tumis93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tumis50-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tongseng29-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tumis35-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat35-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-toge54-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ubi12-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-toge60-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tiwul91-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tumis17-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat49-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tomat35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tapai26-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-telur74-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tempe53-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tempe74-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-telurtahu46-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-telurtahu85-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-telurtahu45-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tapai86-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tek67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tek94-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-telur51-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-teh20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-telurtahu84-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tapai26-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tempe16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tempe70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tempe42-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tapai80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tempe6-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-teh59-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-tek54-breki (npm)
1 compromised version
Page 172 of 7,312