Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,161 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-kue73-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupang73-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lapis21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupang52-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupat46-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue84-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lapis75-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue8-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue55-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lapis8-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue65-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue80-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue81-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue82-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lapis93-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue99-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lengko1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue58-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupat31-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lapis69-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupat14-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kupat5-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-lapis67-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kolak4-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klentik70-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klanting29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue18-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kolak85-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klipo30-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klanting92-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ketan1-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klentik75-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ketan87-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klanting18-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klipo67-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klanting78-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klanting66-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue43-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klipo8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kripik35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue29-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-kue31-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-klentik71-riris (npm)
1 compromised version
Page 204 of 7,324