Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kiwi-piano-skj156-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-qlk-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-ripple-ujc543-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-saturn-ymt368-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-orange-swzm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-tundra-cdd408-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-peony-hln756-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-oscar-papaya-psfdy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-unicorn-ovp308-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-peacock-qji902-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-tkk-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-pkt-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-nectarine-odbf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-sierra-xigua-sdleq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-p3k-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-tt4-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-sequoia-jmd582-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-nectarine-vorv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-papa-ipts (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-quince-abim (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-opal-cen382-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-quince-dtya (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-papa-fxbu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-pde-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-tundra-kew950-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-quebec-qjfc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-pg4-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-piano-rtj084-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-raspberry-rbgj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-quill-awy160-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-quasar-qeu197-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-strawberry-yam-qnhow (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-star-chn001-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-romeo-banana-tngno (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-sierra-nrpz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-platform (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-prairie-btj223-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-ocean-ojn981-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-tangerine-eofx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-reef-hib694-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-lemon-xray-vavay (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-infinity-xlz814-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-honeydew-znpi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-icicle-bun067-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-juliet-jcsj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-kaleidoscope-mag999-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-hotel-ubwd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-mike-ugli-bafpy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-koala-fra647-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-mango-vwgh (npm)
1 compromised version
Page 238 of 7,324