Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,176 total · sorted newest first- Sep 17, 2026
Malicious code in kresna-soto77-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-serimuka36-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-serabi4-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-serimuka52-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-serimuka27-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-soto34-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sroto19-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-semur63-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-serimuka62-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-serabi96-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-soto66-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-semur69-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-soto49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sego7-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambel90-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sate8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sate69-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sate98-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambel52-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sasag72-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sate78-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sate87-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambel86-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambel12-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-semur18-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambel26-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sego2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sego98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sate3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sasag63-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-semur32-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sego99-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambel65-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sego75-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sasag73-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambel88-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambel74-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sego68-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sate66-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sate91-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-semur30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-rujaksoto92-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambalado41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-sambalado68-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-rujaksoto74-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-rujaksoto35-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-rujaksoto88-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-rojak100-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-rojak80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-ruwet58-miaww (npm)
1 compromised version
Page 223 of 7,324