Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,151 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-wajit66-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan14-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakwan100-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-bakso88-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurniawan-asinan7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ubi11-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tumis11-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tumis46-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tomat15-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tempe95-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-wajit28-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tempe34-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-telur3-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tumis2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ubi85-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ubi48-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tumis74-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tempe7-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-telur73-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ubi79-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-toge67-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tomat3-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tomat49-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-telurtahu25-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-toge8-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ubi50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-telurtahu39-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tempe23-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tumis55-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-toge35-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tomat40-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tempe49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tongseng68-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-telur4-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ubi60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tumis85-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tempe13-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tongseng94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-telurtahu79-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tempe70-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-wajit37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tempe46-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-toge80-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-telur83-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-wajit49-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ubi14-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tongseng43-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-telur66-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tongseng70-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tumis32-breki (npm)
1 compromised version
Page 196 of 7,324