Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,624 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-kacang93-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kemplang65-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jengkol27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan44-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kacang47-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kembang44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gulai52-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getuk27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan34-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getas90-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jus5-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gudeg24-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jus97-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jus91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kembang70-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gudeg22-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gudeg90-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gulai88-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ikan22-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gaplek80-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gaplek60-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk1-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gembus54-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gaplek19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-esdoger51-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-dradag21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getas35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gandul16-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-donat28-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gembus31-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-enting62-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gandul79-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-esdoger11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gandul1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gaplek76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk5-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getas11-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gandul84-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado59-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-empal2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getas26-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gaplek62-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado7-riris (npm)
1 compromised version
Page 183 of 7,313