Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,151 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-sambel3-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambel62-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambalado14-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-sambalado28-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-saguer85-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rojak59-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujaksoto31-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rojak16-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujaksoto24-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rojak10-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rojak4-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-saguer74-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rojak7-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-saguer53-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ronde17-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rojak6-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujaksoto70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujak2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujaksoto54-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-saguer72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-saguer6-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ruwet77-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ronde32-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujak49-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ruwet87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-saguer71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujaksoto88-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ruwet94-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujaksoto84-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ronde56-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujaksoto27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-saguer24-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rujak79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rendang74-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rendang12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rendang80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rangi15-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-otak-otak79-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rangi44-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pisang33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pecel87-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rendang25-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-peyek96-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rawon48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rangi92-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ragi8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rawon62-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-peyek84-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pecel35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rawon64-sukiwir (npm)
1 compromised version
Page 199 of 7,324