Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kiwi-november-dlhb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-ik0-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-nectar-xud310-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-icicle-hek291-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-icicle-gvn103-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-juliet-yroz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-leopard-wbq565-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-kilo-dqmx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-1in-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-aib-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-g57-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-honeydew-nectarine-iuoju (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-charlie-vzpm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-dragonfruit-m9v7 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-bridge-9mkv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-elderberry-mkwj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-fjord-lgt030-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-e46-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-11i-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-butterfly-pnk006-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-charlie-ujeb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-grape-wwo9 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-bamboo-fpq617-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-apple-awfb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-cherry-eaob (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-date-xvpo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-85t-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-efiufav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-fern-yhv473-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-acorn-trz905-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-efifav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-efv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-falcon-nvg238-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-eky-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-b9c-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-8rq-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-fig-nectarine-makte (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-cloud-zor772-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-5p3-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-crystal-xla773-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kivra_accounts (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-8xo-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-apple-lima-dhvdb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-eagle-zmp604-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-date-hzjx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-falcon-ioh164-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-date-mango-rtcws (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiwi-banana-esie (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avefivubuug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-aveucf (npm)
1 compromised version
Page 239 of 7,324