Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,161 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-mieayam3-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-naget1-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-moci98-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-moci65-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mieaceh62-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mie53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-moci26-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendut96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-moci90-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miemee32-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-menjes8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mieaceh2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-naget57-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miebogor17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-moci48-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendut45-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-moci33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mie87-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miemee50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-menjes50-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mieayam59-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mie37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-menjes17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miebogor16-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mie26-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miemee54-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-menjes84-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mieaceh3-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-miebogor67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-menjes62-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lontong25-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-martabak85-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lontong92-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendoan9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mangut29-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lepet47-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mangut80-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mangga19-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lutis31-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lutis86-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mangga83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendut5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lepet99-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lontong92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendoan3-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendut100-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendut37-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendoan11-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lumpur52-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lengko86-sukiwir (npm)
1 compromised version
Page 202 of 7,324