Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,173 total · sorted newest first- Sep 17, 2026
Malicious code in kurnia-bubur92-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubursumsum16-rudi0x (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-donat85-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-donat41-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-dodol6-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bika42-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-buburayam28-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubur54-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-botok21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-buburayam77-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubursumsum77-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubur18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-donat6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubursumsum36-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-botok7-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bubursumsum56-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-brengkes31-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-brongkos76-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-brengkes95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-brengkes67-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakali (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakwan5-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jalaja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakso4-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakafaofoai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bika12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakaloakaaoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakwan77-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakaloi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurdish-time (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakso30-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakaloakoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakaloakaanaoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakso79-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-asinan89-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jalakioja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakwan28-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakaofi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jalaalokioja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakaloakaoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakafafsofoai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bika10-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakaofoai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakafafswofoai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bika17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakwan30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia- (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jalalalokioja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakwan67-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupo-app-secure-store-plugin (npm)
1 compromised version
Page 208 of 7,324