Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kiudt-acog-efiuivcafav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-agi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-ef (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-efca (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-zenith-ayc406-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-efiuivcav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-efiuivucafav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-efa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kittcv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-efiduivucuafav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-zephyr-lfp952-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-agiucua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-ag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-fafiug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kitidea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-efiucav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-agaicua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-aguu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-fafiug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acog-efbag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiudt-acavog-fafifug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-dikanai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-afiguib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dinam (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dfyn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-dikanami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-butterfly-cvi553-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-blossom-uir971-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avuffiguufuib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dufdyan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dikanamufai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dnam (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-violet-vot485-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-avuffigufufuib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-afigufuib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-affigufufuib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-dikanamuui (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-afigufib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-dikanamufamui (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-quill-rbc948-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-aib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-avffigufufuib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-nimbus-qim719-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-infinity-lub379-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fg-dufadyan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fanig-a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-afiguffuib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-nebula-jmk767-project (npm)
1 compromised version
Page 241 of 7,324