Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kim-jiwon-m (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kimyoonhyeok (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-jiwon-bau (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-watermelon-xray-utiot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-qhp-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kinabalu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-y7c-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-sierra-romeo-udrgn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-jiwo-bau (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-jiwon-men (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-quince-quebec-uaxlq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-puw-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-sohyun-memeq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kimdjiwon-erui-vert (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-papaya-tango-pfsth (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-ji-bau (npm)
1 compromised version
- GHSA-c8wq-937x-jj4vMalwarenpmkimetsu-no-yaiba-to-the-swordsmith-village-2023-full-mp4720p-1080p-hd-4k-english-subSep 17, 2026
Malicious code in kimetsu-no-yaiba-to-the-swordsmith-village-2023-full-mp4720p-1080p-hd-4k-english-sub (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-jiwon-mem (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-x4x-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-romeo-aayf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-jiwon-meme (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kimuay-agg-ibifua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-victor-lgal (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-tango-banana-utzzo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-victor-flhg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-jiwon-memeq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-raspberry-tango-kjtzw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiloman (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-vanilla-eemw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-sohyu-memeq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-sohy-memeq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-strawberry-golf-yajmo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-victor-yikz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-xylophone-lpne (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-quince-shqr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kim-memeq-bau (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-honeydew-fxvu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-mango-delta-drtjv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-hbh-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-juliet-izxr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-hn3-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-elderberry-kiwi-tkusp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-golf-tangerine-djtii (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-fig-november-kytrn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-n7n-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-mrx-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-kc0-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-papa-mkyi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-papaya-2dp8 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-mike-krvc (npm)
1 compromised version
Page 248 of 7,324