Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kisut-faig-iani (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-ai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-afib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dikanamufami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-jellyfish-cay885-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-lava-dst303-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-quasar-wxh940-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-galaxy-oee736-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dnm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dikanam (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dikanamuf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-public (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-bonfire-gvl276-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dufyn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fg-a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-afiub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-coral-wsr217-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fig-dianam (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-acorn-acs890-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-whirlpool-bvb755-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-ikani (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-dikanamui (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-tide-ujy175-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kitchen-shopify-provisioner (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faig-dikanamufui (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kite-nautilus-xuw856-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amffia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avuffigb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avuffiguub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amfacaicufia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avuffb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avuffib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amfacamicufia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amfaciufia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avufb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amfufia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amfacufia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amfia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avuffiguufub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avuffiguufb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-avuffigub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-faifg-a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amfacaiufia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-danugamicafoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-danamifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-danugamifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-dv (npm)
1 compromised version
Page 242 of 7,324