Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,173 total · sorted newest first- Sep 17, 2026
Malicious code in kuinsu-uyilu-vilannakun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke20 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiperbelt-protractor-epigenetics-kardashevscale (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke25 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiperbelt-taurus-csv-ceres (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vikun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke24 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke15 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke16 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vilanuanakun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vin (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiper-lemon-8y0t (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke21 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke17 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vanmiun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vinliumai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vilanakun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke14 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vaniun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vilnakun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kujibiki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiperbelt-miranda-dotenv-parse-variables-radiant (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiper-orange-yabh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke10 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiper-rainbow-i4u5 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiperbelt-nova-parsec-helios (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiperbelt-yakutsk-bioinformatics-express (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke12 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke19 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-viun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiperbelt-proxima-izar-native (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vinmai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke11 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vinai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiper-kale-6bfm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiperbelt-loopback-solis-oortcloud (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke13 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uyilu-vilanuavnakun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuku-poke18 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuiper-orange-m3ie (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-ukiu-vilkuakmaubimi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lukoiki-nsnbi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uki-vilakunnami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uki-vilakamnaubimi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uiu-vilkukmbimi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-uki-vilakaubimi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lukoki-natbamabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-ukiu-vilkaubimi (npm)
1 compromised version
Page 213 of 7,324