Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,587 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-nasiuduk58-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi99-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasisayur75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasiuduk98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-pecel24-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-oblok75-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci26-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi26-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miebogor89-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasicampur17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miemee65-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi42-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-naget75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-naget76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam13-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi2-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci42-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam62-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miebogor41-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam77-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci93-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-menjes99-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi51-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miebogor48-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mie21-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miebogor58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi73-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci57-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieaceh72-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi35-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasicampur12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miemee1-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mie15-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasicampur28-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam77-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-naget27-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieaceh54-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mie49-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-menjes79-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-naget47-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi19-sumpek (npm)
1 compromised version
Page 177 of 7,312