Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,151 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-pisang64-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rangi100-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pisang15-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pisang49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pisang58-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rendang9-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rawon14-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ragi52-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rangi87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pisang43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pecel72-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pisang13-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rendang53-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pecel50-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rawon79-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rawon4-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rawon62-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rendang40-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rawon35-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rangginang87-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rangginang33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-papeda19-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rangi29-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pecel34-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-rangi71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-pisang18-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ragi30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-naget66-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oncom9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasiuduk63-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oblok81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasicampur58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ongol-ongol6-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-naget78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ongol-ongol11-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oncom84-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ongol-ongol2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oncom24-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasisayur26-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oblok59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasipecel81-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasipecel10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi21-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oncom44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oblok85-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasisayur49-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-otak-otak55-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-otak-otak73-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi90-breki (npm)
1 compromised version
Page 200 of 7,324