Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,151 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-sroto16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-taiwan13-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-soto72-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-soto53-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tahu39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-tapai40-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sego25-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel89-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate57-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sego56-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-semur1-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sasag12-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate54-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-semur22-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sasag92-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate2-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-semur59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sego87-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sasag2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel85-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sasag42-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-serabi86-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate95-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-semur32-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate27-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-serabi5-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate49-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel81-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-semur2-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-soto17-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate22-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate53-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate34-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sate85-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambalado6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel16-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambalado22-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel24-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel60-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel31-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambalado68-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel29-breki (npm)
1 compromised version
Page 198 of 7,324