Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kisut-diufg-diguafuvaoatav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-diafvoatav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-difav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danuamfifoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-diufg-danuamfoa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diguafuavaota (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-diwfzcfecdavgcab (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dufadiuyban (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-dig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dizcb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dufban (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dufaiban (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diguuota (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dbn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-diwfzcfecdavcb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-difzcfccb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-difzcfeccb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diguafuavaotav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diwfz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-difzcfcb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dufadyan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diguauaota (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dufadinban (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-difzcfb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diguota (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dufadiuyan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diguauota (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dufaduyan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dban (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dufadiuynban (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-digua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dufainban (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-duban (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dizb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-diwfzcfecdcb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-diguafuaaota (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-diwfzcfecdavgecab (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-diwfzcfeccb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-di (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-diwfzcfecdacb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-difg-digu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-dzb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amfaaici (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-ami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-acg-aveudcf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-akifub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avaf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amfaaicaicufia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amai (npm)
1 compromised version
Page 244 of 7,324