Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,624 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-martabak52-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lupis32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-menjes26-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-menjes57-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak65-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendut44-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendut6-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lodeh58-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangut28-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendut97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendoan12-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong63-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lumpur23-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendoan16-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong23-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lodeh3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lupis70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangga54-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendoan93-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lutis99-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lumpur76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendoan61-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendut18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-menjes59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lutis3-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lutis53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendut89-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangut46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lodeh73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lutis34-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lumpur50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangga21-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangga55-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lupis77-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong9-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak37-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendoan17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangga59-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak79-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendut10-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lumpur11-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong84-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet77-breki (npm)
1 compromised version
Page 179 of 7,313