Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,624 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-lapis18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet44-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue48-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue34-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue34-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue51-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kripik100-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo69-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo97-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue32-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kripik16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kripik83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kripik48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kolak42-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue18-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo24-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kepok100-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kentang23-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ketan73-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kepok10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klentik75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klanting66-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ketan69-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kepok84-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ketan6-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kembang34-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kepok82-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-keraktelor80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-keripik4-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klanting82-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ketan100-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kepok89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-keripik12-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klanting15-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klanting29-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-keripik88-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klentik84-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ketoprak53-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klanting46-miaww (npm)
1 compromised version
Page 181 of 7,313