Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,178 total · sorted newest first- Sep 17, 2026
Malicious code in kresna-gembus67-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gaplek88-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gaplek97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gado-gado59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gepuk86-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gepuk10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gepuk35-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-getas18-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gado-gado93-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gandul45-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-esdoger33-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gandul100-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gaplek40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gepuk34-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gembus69-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gandul62-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-getas78-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gepuk24-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-getas75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-enting96-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dodol52-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-enting59-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-empal42-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dradag30-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-empal23-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-empal49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dradag42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-donat15-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-bubursumsum80-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dodol30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dradag20-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dodol75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-enting65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-enting13-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-empal52-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dodol63-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-gado-gado39-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-bubursumsum93-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dodol9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-empal33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dradag29-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-empal100-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-empal65-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-dradag1-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-enting48-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-empal42-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-buburayam55-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-empal28-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-enting53-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-donat34-riris (npm)
1 compromised version
Page 231 of 7,324