Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,161 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-mangut18-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lepet59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lodeh21-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-liwet23-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lepet30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lumpur90-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lumpur84-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-liwet82-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lutis57-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lupis65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-menjes36-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mangut74-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lumpur66-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-liwet79-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-liwet67-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mangga58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-menjes31-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-liwet80-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mangut3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lepet87-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lepet46-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-martabak22-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendoan10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendoan37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mendoan99-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lengko99-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-martabak39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-martabak6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-liwet76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lupis39-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-mangut30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lumpur98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-liwet97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lengko64-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lengko28-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lengko83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue96-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue99-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupat94-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue74-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lapis42-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupang18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupat62-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue53-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lapis29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue64-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupat53-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupang71-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lapis45-breki (npm)
1 compromised version
Page 203 of 7,324