Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,587 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-saguer93-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-saguer61-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-sate20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-semur12-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde23-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon69-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde77-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang64-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rujaksoto17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi63-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon12-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde89-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde87-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde71-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rujaksoto3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde55-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rujak37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon100-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rojak41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde63-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rojak10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang37-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon16-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon65-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde74-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rojak88-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rojak67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi78-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang46-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rujak67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde82-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang26-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rojak87-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang99-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi96-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-pisang35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-pisang85-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ragi39-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangginang11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangginang80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-pisang53-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi23-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-peyek67-sluey (npm)
1 compromised version
Page 175 of 7,312