Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,173 total · sorted newest first- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsasodgasdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kucoin-universal-sdk-example (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuaishou-mmu-web-component (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagbdsasdgsdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsasodgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsasoadgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagbdsasodigoasdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsasodasdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagbdsdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ktimeline (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-volyisan-bbs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsasoasdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kube-config (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksunu-uyilu-vanmiun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagbdsasodgsdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kadgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksunsu-uyilu-vanmiun (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagbdsasodigsdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagbdsdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lkui-kagbdsasodigosdfdgdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kagdgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kubernetes-controller-tools (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kadgdumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kte2www (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ktreehr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuinsnu-lki-kaopumi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kstars (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kubernetes-helm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kue-worker (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kubernetes-deploy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kubebuilder (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kuaciyuan-hulianwang (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol4-debug-upk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kilota-aii (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-koalaio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol6-prot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksekina (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-aolomalao (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-app (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-olosdsdggnika (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kskjdksjdks (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol4-debug-serial-erlinglingsan-erlinglingwu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol9-virus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-koaialiaio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-olok (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-aololao (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-koaliaio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol4-debug-app (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksuinsu-uyilu-vanmiun (npm)
1 compromised version
Page 217 of 7,324