Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,173 total · sorted newest first- Sep 17, 2026
Malicious code in kupo-capacitor-statusbar-safe-area (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jalalkioja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakafofoai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakalokakai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jalaoja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupciaapp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakaofai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-asinan55-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakalokakaanaoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakafafswafofoai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakwan74-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-asinan92-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jalaa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kurnia-bakso23-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakalokakanaoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ulokia-jakafafofoai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kullaa-jiaajouaai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaka-jokiohaasikimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakaloakai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakalai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-ja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaka-jokioaasikimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutila-jokiloua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutoila-joiloluana (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kullaa-jijouaai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaka-jokioaskimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakalokai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakaloai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutoila-joiluna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutia-jok (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutila-jokilokluana (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kullaa-jjai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaka-jokioasikimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutoila-jokilokluana (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jokiomalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kullaa-jiakajoualai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulka-jalalokioja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutila-jokilouana (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaka-jokiosimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaka-jokiohakasikimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutila-jokiloa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutoila-joilouana (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutila-jokiloluana (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakalokakaaoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukuola-joiluna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakali (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutoila-joilokluana (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutila-joki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jak (npm)
1 compromised version
Page 209 of 7,324