Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,151 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-mendut18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-menjes59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lutis3-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lutis53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendut89-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangut46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lodeh73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lutis34-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lumpur50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangga21-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangga55-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lupis77-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong9-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak37-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendoan17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mangga59-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak79-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-mendut10-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lumpur11-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lontong84-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-martabak65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet77-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet55-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet10-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupat100-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue5-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue82-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis22-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis41-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis81-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang23-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue64-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupat4-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue99-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue49-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupat44-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue41-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue59-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lengko12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue79-remi (npm)
1 compromised version
Page 190 of 7,324