Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,151 total · sorted newest first- Sep 17, 2026
Malicious code in kurniawan-bubursumsum82-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-brengkes23-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-botok33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubursumsum37-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-brengkes64-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubursumsum17-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-dodol70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-buburayam74-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubur50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan63-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubur26-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-brongkos38-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-botok61-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-dodol95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bika8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-brengkes6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-botok7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-dodol13-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-buburayam81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-brengkes14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bika2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan80-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-dodol24-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubursumsum61-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan56-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubur34-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubursumsum38-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubursumsum26-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan4-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bubur77-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bika67-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan54-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bika8-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-brengkes24-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-brongkos50-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan1-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-wajit57-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakso79-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-wajit56-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakso5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-asinan32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakso19-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakso61-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakso91-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakso98-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-asinan59-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-asinan32-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan36-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan38-breki (npm)
1 compromised version
Page 195 of 7,324