Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,161 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-gulai55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gulai76-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-ikan34-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-getuk67-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gudeg74-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-getuk85-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-getuk89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-getuk35-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-getas39-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-getas85-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gepuk12-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gepuk44-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gaplek52-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gorengan36-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gorengan56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gulai21-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gulai51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gulai44-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gembus14-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gaplek79-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gulai73-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gaplek46-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-getuk5-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gepuk34-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gepuk17-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gembus21-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gudeg79-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gembus83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gorengan8-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-getas93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gepuk58-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gepuk43-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gudeg50-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gembus32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dradag50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-empal45-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dradag30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dradag4-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-esdoger8-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dradag91-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dradag69-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-enting94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-empal89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-enting61-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gado-gado94-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-empal52-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gandul55-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gandul72-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-empal16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gandul40-breki (npm)
1 compromised version
Page 206 of 7,324