Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,173 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-esdoger8-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dradag91-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dradag69-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-enting94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-empal89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-enting61-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gado-gado94-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-empal52-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gandul55-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gandul72-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-empal16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gandul40-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gado-gado6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-enting56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gaplek28-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gandul23-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gaplek28-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-empal91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-empal64-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gado-gado1-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gandul50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dradag63-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gado-gado16-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gado-gado51-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gandul76-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-enting12-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-gado-gado86-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-buburayam62-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubur48-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-buburayam13-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bika72-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-donat31-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dodol21-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakwan52-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dodol19-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-brongkos40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-botok80-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-buburayam57-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-buburayam50-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-brongkos94-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubur67-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dodol58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-donat55-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubur42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-brongkos86-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubursumsum46-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-botok7-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bika56-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-brongkos71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-donat49-breki (npm)
1 compromised version
Page 207 of 7,324