Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,149 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-nasipecel76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-otak-otak15-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ongol-ongol48-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ongol-ongol74-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasipecel59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasisayur90-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-oblok5-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasicampur79-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasisayur6-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasiuduk84-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ongol-ongol34-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-papeda68-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasiuduk58-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi99-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasisayur75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasiuduk98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-pecel24-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-oblok75-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci26-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi26-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miebogor89-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasicampur17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miemee65-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi42-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-naget75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-naget76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam13-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi2-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci42-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam62-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miebogor41-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieayam77-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci93-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-menjes99-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi51-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miebogor48-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mie21-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-miebogor58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi73-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci57-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mieaceh72-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasi35-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-nasicampur12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-moci91-riris (npm)
1 compromised version
Page 188 of 7,323