Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kiut-acog-efiduiucfav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-efiduufav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefivubufuaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avefvuug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-efiduivucuafav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avef (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avecf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-efiduivucfav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avefivubufuaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-aef (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefivubig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-aveug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-efidufav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acvog-uu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avefivubufuadvig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefvg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefivubufuig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefivuig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avefivuug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefvig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avefivubufuaadvig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-aveudcf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefivubufuadig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-fag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-aveg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefivubufig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefivubuig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefivig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avefug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-avefivubufuaadvig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avefivubufuig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acog-efav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-avefivubug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiut-acg-ave (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-zebra-ivk392-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-efag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-agaiucua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-aug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-fafikufug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-fafiufug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-fafiufug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-faig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-afiug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-agica (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-efiuicav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-xerus-piz525-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kitty-teadev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-agicua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-zenith-acr160-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-fafifug (npm)
1 compromised version
Page 240 of 7,324