Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,173 total · sorted newest first- Sep 17, 2026
Malicious code in kupaio-kullaa-jiajouaai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kuloka-jalalokioja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukula-joiluna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kullaa-jiaajoualai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kullaa-jijoai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakalokakaai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kullaa-jai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutila-jok (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jokiokimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jakai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kullaa-jijai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutoila-joiluana (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukuoila-joiluna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-ukutila-jokilouna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaka-jokiohakaasikimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jaa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaka-jokosimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-uloka-jaka (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jokioakimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-joko (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jokiao (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jokosim (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jalalokioja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jokialo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jokosimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jiakalai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jokos (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-joiuna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jokiohakakimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jokioimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-joi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jiakaulai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jokosima (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jalaoki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jaoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jalalokio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jokosimao (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jalaloki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jokiohaakimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jalalokioj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-joia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jokosi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kula-jaloki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jiak (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jokiohakaikimalo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-joia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kupaio-kulaa-jiakaualai (npm)
1 compromised version
Page 210 of 7,324