Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kisut-diug-danugamicfufoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-damfoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-doa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-diguafvoatav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-damifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafnig-a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-danugamicfoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-damoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-danugamicfuifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-ama (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amfaaicamicufia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-danugamicffoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-diguafvaoatav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-dmoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-danuamifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diug-danmifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-amfa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-fafunig-aa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcfecdav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danuoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-daoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcfecd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danufoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-d (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-difvatav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-diguafuavaoatav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcfecdavg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcfec (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-difatav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-dav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danuamfuifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcfecdavge (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danuamffoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-diav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcfe (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-digafvoatav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-da (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcfecda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danuamicfuifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcfecdavgecab (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcfecdavgec (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfzcf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-difvoatav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danuamifuifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-diftav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danuafoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danoa (npm)
1 compromised version
Page 243 of 7,324