Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,624 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-liwet55-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet10-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupat100-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue5-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue82-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis22-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis41-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis81-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang23-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue64-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupat4-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue99-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue49-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupat44-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue41-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue59-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lengko12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue79-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis46-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis26-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupat62-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis94-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang36-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue63-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet48-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet67-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis32-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang80-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet84-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang11-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet51-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis95-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet7-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang57-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis18-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis89-sukiwir (npm)
1 compromised version
Page 180 of 7,313