Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kisut-afnicg-akifiacufub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafeacf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-aif (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afnig-aib (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amfaaicamicufia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-akifiacufub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amfaaic (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafeucsacf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afnig-akifub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-akifiacub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afnig-akificfub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afnig-ami (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisschat (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-akif (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amfaaicaiuia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-dfg-db (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kismet_n88o7_qg3ic_illusion (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafeucdsacf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amfai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-aveudcf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avaff (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afnig-ai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafeucsdsacf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amfaai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afnig-aiub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafeucacf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-akifiacfub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amfaaicauia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafecf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafeucdacf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afnig-akifiub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afunig-amfaaicia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafeucdcf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafeudcf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afnig-akifiacufub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-akifiaub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-akifaub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-af (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kisut-afncg-avafeuacf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kinetic-upgrade-pino-sagitta (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kintek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kismet-whisper-nde416-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiota (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kinetic-release-it-perseus-ursa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kinetic-typeorm-less-loader-markdownlint (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kinetic-pino-pretty-centauri-neptune (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kismet_dgs5f_u0r0y_maple (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kirbyterm (npm)
1 compromised version
Page 245 of 7,324