Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,173 total · sorted newest first- Sep 17, 2026
Malicious code in kuinsu-lubuki-viakunanami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kopimi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kopannataiabumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kopanaimi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubki-nasuui (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kopanaiabumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubki-nasi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubuki-nasiuvanami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubki-nasiuvnami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubki-nasimi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubuki-vilakunanami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubuki-vianami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubuki-nasivanami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kopanaiumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubuki-nasivnami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-luki-kinatuomolagi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubki-nasmi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubki-nasinami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubuki-vinanami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kopnaimi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lubki-nasiunami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kopmi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kopanunataiabumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kopanusnataiabumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagnuabuanmi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagubunmi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagubumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsu-lki-kaopumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagbumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kaguabuanmi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsasoasdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol8-prog (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kubernetes.io (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsasoasddgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksut-ag-ibifua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kaoumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagbdssdgsdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ktyt3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksut-agg-ibifua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagbdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsadgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-volyiyi-web-sec (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsasodgoasdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kucoin-prices (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbddgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuimwubna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuaile-xueziwei (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsasodigoasdfdgdgdumi (npm)
1 compromised version
Page 216 of 7,324