Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,178 total · sorted newest first- Sep 17, 2026
Malicious code in kresna-brongkos61-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-buburayam26-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-bubur6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-brongkos99-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-brongkos81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopibot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kpfjzltsybodqnch (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kookingan2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kotlin-wasm-package-lock-project-test (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kosmobot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kosan-app (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopling-kering (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kousik (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kosignbox (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopling-sentrifugal (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopi2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopi1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopling-piringan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kong-manager (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kontemp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kory-wallet-store (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kosmio-worker (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kotebr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kowieo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kory-validator-catalyst (npm)
1 compromised version
- Sep 17, 2026
Malicious code in konora (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopling-shogun-minta-inbox (npm)
1 compromised version
- Sep 17, 2026
Malicious code in korkort (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kory-soluble-pot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopimia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopling-basah (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopul-cli (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kpktcqlnjoimvyae (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kpi-panel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kotlin-wasm-package-lock-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in konflikto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in korepwx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kopling-apalagi-njirr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koi_teal-73-tisubasah (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koltron-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koko-poke18 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koala-xerox-eky245-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koko-poke7 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koko-poke11 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in komputer (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kodeks (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koko-poke24 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koko-poke23 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koala-sapphire-omn644-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in koi-grid (npm)
1 compromised version
Page 233 of 7,324