Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,176 total · sorted newest first- Sep 17, 2026
Malicious code in ksai-kaiso-olakiakoalio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-ka-ahakaoliaj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kais-aji (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kaiso-olai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kaiso-aola (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kais-ajiobola (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kaiso-ajiobanila (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kaiso-ajiobaniolaa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-ka-ahakaoliaaji (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kaiso-ajiobanla (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-kais-ajioa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-ka-ahakij (npm)
1 compromised version
- Sep 17, 2026
Malicious code in krsduh-devapptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-rest-sedna-umbriel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in krystianzs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-ka-ah (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-buffer-titan-zephyr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-spinner-io-jekyll (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-areology-javascript-publish (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kryptor-session (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-umbriel-sass-loader-cassini (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksachin (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kryptonite_ulsfy_v5mrf_fireworks (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-sagitta-zenith-ganymede (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-library-jasmine-spectron (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-odin-husky-impulse (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-terser-carpo-nconf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kryptonite_kpbw1_peo9r_crown (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kryptonite_hwt6p_qwc2v_fern (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-sirius-process-koa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-apollo-changelog-eslint-plugin (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kryptor-csrf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kryptonite_yy0w1_1u2xo_keystone (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-fornax-terser-dotenv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-deimos-regulus-warp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-atlas-hermes-local (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-geochemistry-query-solarnebula (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kryptonite_xa6kb_wk46r_whisper (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-lynx-brane-venus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-grus-iota-eris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-async-library-io (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-inquirer-promise-dactyl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ks-sha3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-gridsome-eslint-plugin-forever (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-soap-mongoose-nightwatch (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kryptonite_q6jly_he2fj_quartz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in ksai-ka-a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-grus-scripts-helios (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-init-carpo-transform (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-webdriver-manager-celeste-luna (npm)
1 compromised version
Page 220 of 7,324