Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,151 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-jamblang27-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kacang4-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ikan1-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kacang78-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getuk67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kemplang32-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gudeg34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jengkol56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kacang18-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gudeg18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getas36-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gudeg51-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getuk87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jus1-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jus46-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan60-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kembang97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getuk88-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getuk81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gulai86-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan24-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getuk29-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kembang50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ikan25-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kemplang61-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kacang93-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kemplang65-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jengkol27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan44-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kacang47-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kembang44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gulai52-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getuk27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan34-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getas90-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gorengan78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jus5-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gudeg24-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jus97-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-jus91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-kembang70-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gudeg22-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gudeg90-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gulai88-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-ikan22-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gaplek80-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk98-breki (npm)
1 compromised version
Page 193 of 7,324