Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,149 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-rujaksoto86-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-sate38-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ruwet46-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-sego97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-saguer60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-sambalado97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-semur87-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-semur43-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ruwet90-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-sate83-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-sate83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-sate40-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-saguer93-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-saguer61-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-sate20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-semur12-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde23-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon69-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde77-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang64-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rujaksoto17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi63-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon12-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde89-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde87-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde71-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rujaksoto3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde55-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rujak37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon100-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rojak41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde63-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rojak10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang37-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon16-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rawon65-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde74-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rojak88-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rojak67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rangi78-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rendang46-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-rujak67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ronde82-breki (npm)
1 compromised version
Page 186 of 7,323