Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,176 total · sorted newest first- Sep 17, 2026
Malicious code in kronos-phoebe-kronos-elektra (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-pipe-delphinus-centauri (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-ichnology-dotenv-safe-seismology (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-grunt-sadr-event (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-hexo-nodemon-firebase (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-antd-dorado-nextjs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-restart-csrf-jsonp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kronos-blitz-event-iota (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kryptonite_5c0w5_iu9lc_jade (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-toge7-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe82-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tumis14-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-toge89-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-ubi74-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-toge72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe80-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tumis98-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tomat59-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tomat78-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe57-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-toge91-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kristine-validator-catalyst (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tomat25-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe9-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-wajit52-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kripto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe46-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kristine-wallet-store (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tomat77-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-telurtahu74-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe11-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe60-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tumis9-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tumis63-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tomat91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tempe57-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-ubi45-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-toge23-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-telurtahu96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tongseng66-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-wajit32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-wajit53-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-ubi70-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-telurtahu85-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-tumis9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kristine-soluble-pot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-toge50-miaww (npm)
1 compromised version
Page 221 of 7,324