Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,151 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-gaplek60-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk1-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gembus54-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gaplek19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-esdoger51-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-dradag21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getas35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gandul16-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-donat28-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gembus31-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-enting62-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gandul79-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-esdoger11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gandul1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gaplek76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk5-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getas11-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gandul84-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado59-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-empal2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-getas26-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gaplek62-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado7-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-esdoger98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-donat27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado91-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-enting97-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-dradag12-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gembus21-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado19-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gado-gado82-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gembus98-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-esdoger70-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-empal39-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk45-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-donat20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-empal58-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-esdoger1-rudi0x (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-dradag20-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-gepuk59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-enting35-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-enting65-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubursumsum7-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-brengkes72-pore (npm)
1 compromised version
Page 194 of 7,324