Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,151 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-lapis2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis46-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis26-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupat62-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis94-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang36-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue63-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet48-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet67-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis32-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang80-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet84-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang11-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet51-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis95-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lepet7-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kupang57-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis18-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis89-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-liwet44-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-lapis87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue48-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue34-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue34-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue51-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kripik100-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo69-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo97-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue32-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kripik16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-klipo30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kue19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kripik83-riris (npm)
1 compromised version
Page 191 of 7,324