Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,173 total · sorted newest first- Sep 17, 2026
Malicious code in kssd-vol2-rev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol4-debug-serial-erlinglingliu-erlingyiyi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksl-weather (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol4-debug-serial-erlinglingling-erlinglinger (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-oloka (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-olosdsdsdgggnika (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-olo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kilota-ailoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kilota-aioi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-olonka (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksdsjdksjmncnjsdmsnd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisom-aolomalao (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol5-lang (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kspapd-devapptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-volyier-etc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol1-basic (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-kokaialiaio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol4-debug-encry (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol7-pediy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-volyiling-vuln (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksmylz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol4-debug-demo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisom-olomalao (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kssd-vol3-sys (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-olosdsdgnika (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kilota-ailolioia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-koaio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kilota-ai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksaki-kaisoim-aoloao (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kilotaa-ailolioia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kss-node-handlebars-builder (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksimzflpubgwrxhj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kilota-ailoloia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksbackgroundtask (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kil-kokaialiaio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kil-kokaii (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-aio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-ailoli (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kil-kokaialio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kil-koi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kil-kokaiai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kil-kokaiali (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-ailolia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-ailolioia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kil-koki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kil-kokaialiao (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kil-kaokoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-ailoliia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kiloa-ailo (npm)
1 compromised version
Page 218 of 7,324