Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,161 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-oblok59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasipecel81-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasipecel10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi21-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oncom44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oblok85-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasisayur49-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-otak-otak55-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-otak-otak73-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi90-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi25-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-otak-otak36-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-otak-otak13-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ongol-ongol11-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasipecel83-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasipecel66-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasicampur41-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-otak-otak55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ongol-ongol31-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ongol-ongol51-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasicampur75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasipecel34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ongol-ongol81-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ongol-ongol32-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oblok19-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasipecel85-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasisayur64-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-otak-otak46-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi73-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasisayur49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oncom52-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi90-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oblok2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasicampur41-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasisayur59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-nasi93-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-oblok87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miebogor1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mieayam13-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-menjes8-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-menjes67-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mieaceh1-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miebogor69-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miemee17-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-moci6-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mie81-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mieayam94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-naget24-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miemee49-kyuki (npm)
1 compromised version
Page 201 of 7,324